[zer0_s3c]

Figured I'd make a thread with some useful links to help people out as a reference. Hope it helps ya'll as much as they've helped me. Enjoy
--------------
*First of all I highly encourage that you search the forums for any tutorials.. *
--------------

Cross-Site Scripting(XSS);

Tutorials:
http://www.steve.org.uk/Security/XSS/Tutorial/
http://www.veracode.com/security/xss
http://www.andhrahackers.com/forum/hacki...-tutorial/
http://www.cgisecurity.com/xss-faq.html
http://www.techfuzon.com/2008/07/basic-x...orial.html

Cheat-Sheets:
http://ha.ckers.org/xss.html
http://anautonomouszone.com/blog/xss-cheat-sheet

SQL Injection;

Tutorials:
http://www.veracode.com/security/sql-injection
http://www.immortaltechnique.co.uk/Threa...I-Tutorial
http://hackthenet.blogspot.com/2011/06/c...orial.html
http://pastebin.com/ruDvYW7u
http://www.garenaworld.com/Thread-Guide-...al-bey0ndz
http://www.garenaworld.com/Thread-Guide-...al-bey0ndz

Cheat-Sheets:
http://ha.ckers.org/sqlinjection/
http://pentestmonkey.net/cheat-sheet/sql...heat-sheet

Romote File Inclusion Tutorials:
http://securityxploded.com/remote-file-inclusion.php
http://penetrationengineer.blogspot.com/...usion.html
http://www.explorehacking.com/2011/01/re...ploit.html
http://blacklibrary.wetpaint.com/page/RFI+Tutorial

Local File Inclusion Tutorials:
http://evilzone.org/tutorials/local-file...%28lfi%29/
http://ahfcrew.blogspot.com/2011/10/rfil...orial.html
http://www.devilscafe.in/2011/10/lfi-loc...bsite.html
http://www.securitytube.net/video/2459

Using Shells:
http://www.go4expert.com/forums/showthread.php?t=19226
http://www.innocenthacker.in/2011/05/hac...z1kFNsFLKr
http://www.hungry-hackers.com/2010/08/ha...usion.html
(Includes PHP Shelling)

----------
- Goon

[Ultimatum]

Good compilation, I thought it was a compilation on AF

[zer0_s3c]

Do what? O_o Lol, you lost me.

[Phytrix]

Do what? O_o Lol, you lost me.

I believe he was saying he expected it to be a directory to threads around AF.

Great compilation though.

[zer0_s3c]

That'll actually be Part II. I'll be working on after I get done leaking this site.

[Bannedshee]

Awesome compilation, I better start on those LFI RFI and XSS tuts

[workaholics]

Thanks! I know alot except for the lfi and rfi. Are those even popular?

[zer0_s3c]

Popular, not as much as CSRF and SQL Injections, but Remote File Inclusion(RFI) comes in handy when you want to shell a website with out all the work, so to speak.

[Corrupt]

Pretty nice compilation Goon.