This list is for anyone wishing to learn about web application security but do not have a starting point.
You can help by sending Pull Requests to add more information.
If you’re not inclined to make PRs you can tweet me at @infoslack
Table Of Contents
- Books
- Documentation
- Tools
- Cheat Sheets
- Docker
- Vulnerabilities
- Courses
- Online Hacking Demonstration Sites
- Labs
- SSL
- Security Ruby on Rails
Books
- The Web Application Hacker’s Handbook: Finding and Exploiting Security Flaws
- Hacking Web Apps: Detecting and Preventing Web Application Security Problems
- Hacking Exposed Web Applications
- SQL Injection Attacks and Defense
- The Tangled WEB: A Guide to Securing Modern Web Applications
- Web Application Obfuscation: ‘-/WAFs..Evasion..Filters//alert(/Obfuscation/)-‘
- XSS Attacks: Cross Site Scripting Exploits and Defense
- The Browser Hacker’s Handbook
- The Basics of Web Hacking: Tools and Techniques to Attack the Web
- Web Penetration Testing with Kali Linux
- Web Application Security, A Beginner’s Guide
- Hacking: The Art of Exploitation
- Crypto 101 is an introductory course on cryptography
- Metasploit Unleashed
- Security Engineering
- OpenSSL Cookbook
- Learn and apply cryptographic techniques.
- A guide to the key concepts, terminology, and technologies of cybersecurity perfect for anyone planning or implementing a security strategy.
- Kickstart a career in cyber security by learning how to adapt your existing technical and non-technical skills.
- A book about cryptographic techniques and Secret Key methods.
- This practical book is a one-stop guide to implementing a robust application security program.
- Practical guide to cyber threat hunting.
- Bug Bounty Bootcamp
- Hacking APIs
- A book about building web apps that are ready for and resilient to any attack.
For more information click here.