Web Application Hacker's Handbook

[Ntvu]

http://portswigger.net/wahh/

Web Application Hacker's Handbook by Dafydd Stuttard (aka Portswigger)

I bought this book a few weeks ago and right now I'm on Chapter 7. It seems like a very good book and covers the material in depth, although it can be a bit wordy at times.

Does anyone also have this book? What do you think about it?

[thedotmaster]

Here's a link to a rapidshare of it: http://rs577.rapidshare.com/files/21641 ... ndbook.rar
I haven't looked at it yet, but will post a review in a few days.

(Sorry if posting such content is against ToS - if it is, I won't do so again, but I couldn't find anything in the ToS against it)

[Ntvu]

I forgot about this thread for almost a month. I just happened to be browsing in the Books forums today and found it.

I finished Chapter 12 yesterday (which deals with attacking other users via XSS, XSRF, JSON hijacking, DNS pinning, frame injection and several other concepts) and will be starting Chapter 13 tomorrow. In my opinion the book gets a lot more interesting starting at Chapter 9 (code injection). I learned numerous things that I've never heard of before as well as some valuable tips on SQL injections.

[AK-33]

Does this book come with a CD?