https://www.owasp.org/
http://www.freebuf.com/
https://www.t00ls.net/
http://www.ichunqiu.com/
http://www.bugscan.net/
http://www.7kb.org/
http://www.cnhonkerarmy.com/
http://www.2cto.com/
https://www.zhihu.com/
国外：
http://www.pentest-standard.org/index.php/Main_Page
http://www.webappsec.org/
https://www.appsecurelabs.com