Attacking WordPress http://www-personal.umich.edu/~markmont/awp/
Good presentation on the nuts and bolts of breaking into a WordPress site and taking control of the server. Uses only open source tools. A must read for anyone that needs to secure a web server.
The 6th incarnation of Elmer's blog