The Cross-site Request Forgery FAQ has been released to address some of the common questions and misconceptions regarding this commonly misunderstood web flaw.

One of the best War Dialers I came across . Current Features: Full and Normal logging: Full logging records all possible events during dialing (busy signals, no answers, carriers, etc). By default it only records things that we might find interesting (carriers, possible telco equipment). ASCII flat file and MySQL logging: You can log to [...]

SSA is a GUI that relies on OVAL Framework (see oval.mitre.org) http://www.security-database.com/

Here is a good resource on the good, the bad and the ugly of using NetBIOS NULL Sessions as attack target