What: Purple paper on discovery and exploitative vhost hacking techniques.

Whom (target audience): pentesters.

Where:
http://public.gnucitizen.org/papers/exegesis.pdf
http://www.ikwt.com/projects/exegesis.pdf