Ask HN: Best online resources for learning web security

Posted by TXV on Friday January 20, 2017 @07:49AM
from the ask-hn dept.

I find myself rather lacking in web security skills. I have a basic understanding of what TLS/certs/CAs/... are, gotten mainly from Wikipedia and blog articles but I often don't know how to make it all work together. What do you think is the best comprehensive online (free) resource to learn the ropes?

( 11 comments | 21 points | on HN )

Re:Ask HN: Best online resources for learning web security by ergot on Sunday January 22, 2017 @12:29PM (#13456083)

There's a fairly comprehensive list here:

https://github.com/sbilly/awesome-security

[ Parent | on HN ]

Re:Ask HN: Best online resources for learning web security by FullMtlAlcoholc on Friday January 20, 2017 @12:06PM (#13445154)

Try https://reddit.com/liveoverflow and https://fsecurify.com

[ Parent | on HN ]

Re:Ask HN: Best online resources for learning web security by demonshreder on Monday January 23, 2017 @02:41PM (#13465243)

https://hackthissite.org

[ Parent | on HN ]

Re:Ask HN: Best online resources for learning web security by cypherg on Friday January 20, 2017 @12:19PM (#13445245)

There isn't a single reputable one that I know of.

[ Parent | on HN ]

Re:Ask HN: Best online resources for learning web security by csnewb on Friday January 20, 2017 @01:28PM (#13445797)

Try searching for a pdf of the "Web Application Hacker's Handbook".

[ Parent | on HN ]

Re:Ask HN: Best online resources for learning web security by grzm on Friday January 20, 2017 @04:21PM (#13447069)

Is the PDF legally available online? The sources I see don't appear to be.

[ Parent | on HN ]

Re:Ask HN: Best online resources for learning web security by csnewb on Friday January 20, 2017 @05:13PM (#13447391)

I don't think it is legally available online. Getting the physical book would be the best option since its legal and more thorough than any online resource I've found, but I don't know what your budget is like or if you even like reading books. Just saying that its one option you have.

[ Parent | on HN ]

Re:Ask HN: Best online resources for learning web security by phaus on Friday January 20, 2017 @10:49PM (#13448647)

In about 30 seconds I found several places to get it as an ebook, and at least 3 that have PDFs.

O'Reilly's a good place to buy from.

[ Parent | on HN ]

Re:Ask HN: Best online resources for learning web security by phaus on Friday January 20, 2017 @04:01PM (#13446946)

Or he could just buy it. It's well worth the price.

[ Parent | on HN ]

Re:Ask HN: Best online resources for learning web security by csnewb on Friday January 20, 2017 @04:18PM (#13447052)

He asked for an online resource, I gave him one. No shit buying the book itself is better.

[ Parent | on HN ]

Re:Ask HN: Best online resources for learning web security by hnhnic on Friday January 20, 2017 @10:25AM (#13444427)

https://www.owasp.org/index.php/Main_Page

[ Parent | on HN ]