The Web Application Hacker's Handbook
Finding and Exploiting Security Flaws
A comprehensive guide to finding and exploiting security vulnerabilities in web applications.
Author: Dafydd Stuttard & Marcus Pinto
Category: Web Security. Difficulty: Intermediate.