Nikto | CIRT.net
Nikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers (security holes, unsafe cgi scripts, etc)
lcamtuf's blog: HTTP cookies, or how not to design protocols
ongoing by Tim Bray · WikiLeaks
Tim Bray's well reasoned take on wikileaks