Web Application Security: The OWASP Top 10 in Depth

<p>A hands-on, story-driven walkthrough of the OWASP Top 10 that goes well beyond definitions: follow one engineer's security review of a fictional gear-rental marketplace as she exploits and then fixes a SQL injection login bypass, a command injection bug, an insecure direct object reference, a server-side request forgery hole, a stored XSS vulnerability, and an insecure deserialization flaw -- each with working vulnerable code, a real exploit, and a defense-in-depth remediation.</p>

Tools: owasp top 10, web application security, injection, xss, access control