漏洞挖掘/漏洞分析--
Cve.mitre.org
www.corelan.be----geek of pentesters
http://wrox.cn/article/100048133/ 浏览器挖掘框架Morph诞生记
Morph is an open source browser fuzzing framework written by Walkerfuz of Taurus Security.It provides an automated way to fuzz a browser, like IE, Firefox, Chrome, etc.