Real-World Web Hacking: A Field Guid..., Peter Yaworski
Author:Peter Yaworski. Real-World Bug Hunting is a field guide to finding software bugs. As you read each report, you'll gain deeper insight into how the vulnerabilities work and how you might find similar ones.