Info
http://securityxploit.blogger.de/stories/1901179/

eEye Digital Security, the industry’s leading innovator of threat management solutions, just released new research, “Working Toward Configuration Best Practices” . Findings verify that proper configuration and mitigations remain the most effective way to secure IT infrastructure.

Info PDF
http://www.eeye.com/eEyeDigitalSecurity/media/ResearchPapers/eEye_ICWST_WP.pdf

Download
http://go.eeye.com/icwt

• ClickJacking & Phishing by mixing layers and iframe
• CSRF and leveraging CORS to bypass SOP
• Attacking WebSQL and client side SQL injection
• Stealing information from Storage and Global variables
• HTML 5 tag abuse and XSS
• HTML 5/DOM based XSS and redirects
• DOM injections and Hijacking with HTML 5
• Abusing thick client features
• Using WebSockets for stealth attacks
• Abusing WebWorker functionality

Download PDF
http://www.blackhat.com/html/bh-eu-12/bh-eu-12-archives.html#shah

GooDork is a simple collection of python scripts designed to bring the power of google dorking straight to your command line.

Info
https://github.com/k3170makan/GooDork/wiki

Download
https://github.com/k3170makan/GooDork

Doxing A hosting server using GooDork
http://pastebin.com/VU7NArKL

Demo:
http://www.banki.ru/bitrix/rku.php?id=829&goto=http://xxxxx.com

Google Dork:
inurl:bitrix/rk.php

by
Sony and Flexxpoint

Full List:
http://ia600305.us.archive.org/1/items/DojoconVideos/