Explanation, why Google was vulnerable against UTF-7 encoding
Anleitung, wie man in php utf7-strings zur filter evasion erzeugt
Stanford SecuriBench is a set of open source real-life programs to be used as a testing ground for static and dynamic security tools.