Hacker News Reader

The Web Application Hacker's Handbook is also practically a must-read for those in the field.

+1 for WAHH! It is quite good in that it covers everything and is very readable for a book on subject as this.

> If you are interested in learning web app security but can't get into Stanford...

there's slides, video, and linked readings for all the sessions in this class, though.

The gold standard for this stuff is The Web App Hacker's Handbook.