Ask HN: Primer on Web Security

Re:Ask HN: Primer on Web Security by tptacek on Wednesday June 03, 2009 @02:41PM (#640185)

I like Dafydd Stuttard's "The Web Application Hacker's Handbook", despite the title. Work through the examples.

A lot of people will direct you to OWASP, which is not a bad free tertiary source (owasp.org). There's lots of HOWTO stuff there. Be careful about the OWASP Top 10. You want to know what it is, but it's showing its age.

[ Parent | on HN ]

Re:Ask HN: Primer on Web Security by pasbesoin on Wednesday June 03, 2009 @03:42PM (#640265)

While looking at the recommendation, I noted that the book's website has a page of links to tools:

http://portswigger.net/wahh/tools.html

Nothing eyebrow raising, but if you're starting out, worth knowing about.

[ Parent | on HN ]

Re:Ask HN: Primer on Web Security by tptacek on Wednesday June 03, 2009 @03:45PM (#640275)

Portswigger is the author of Burp, which is the industry standard web application testing tool. Almost everyone I know in the field uses it.

[ Parent | on HN ]