If your interest lies in the "Pwn" aspect (competitive hacking), the most useful "papers" are actually the and Rules released by the Zero Day Initiative (ZDI) .