1. Sending Valid Phishing E-mails From Microsoft.com Domain by Using Office 365
https://www.utkusen.com/blog/sending-valid-phishing-emails-from-microsoftcom.html
2. WRITING YOUR FIRST EXPLOIT
https://media.defcon.org/DEF%20CON%2024/DEF%20CON%2024%20presentations/DEFCON-24-Robert-Olson-Writing-Your-First-Exploit.pdf