A New Favorite Web Security Book

My mom, wonderful person that she is, sent me the Web Security Testing Cookbook by Paco Hope and Ben Walther, and it's just delicious. I've been endlessly fiddling with my computer installing new tools and trying out the recipes ever since. This is fun stuff!

Web Security Testing Cookbook with cats (to enhance the visual effect)

The book is packed with delightful recipes with titles such as "Creating Decompression Bombs", "Subverting AJAX With Injected Data", "Creating Overlays Using XSS", and many more. The book is targeted to software developers and testers who are interested in improving the security of their software and incorporating security tests into their test suite.

The recipes are short and easy to follow and implement, and give a great sense of satisfaction and accomplishment when completed.

One thing I found was that the CAL9000 tool is no longer available and OWASP now suggests using EnDe instead, so I'll need to make adjustments to the recipes that use the CAL9000 tool. If I find any other anomalies worth mentioning, I'll update this post.