The Web Application Hacker's Handbook: http://ftp.icm.edu.pl/packages/Hacked%20Team/FileServer/FileServer/OLD%20Fileserver/books/SICUREZZA/Wiley%20-%20The%20Web

The Web Application Hacker's Handbook: http://ftp.icm.edu.pl/packages/Hacked%20Team/FileServer/FileServer/OLD%20Fileserver/books/SICUREZZA/Wiley%20-%20The%20Web%20Application%20Hackers%20Handbook=%20Discovering%20and%20Exploiting%20Security%20Flaws%20-%202008.pdf http://ftp.icm.edu.pl/packages/Hacked%20Team/FileServer/File... Matasano used to mail it to all their potential candidates and told them to read chapters N throgh M. Unfortunately I've forgotten the values of N and M, so just read the whole thing. It's worth the time.