Does anyone have any recommended resources ? TIA !
https://www.owasp.org/index.php/Top_10_2013-Top_10
http://www.nsa.gov/ia/_files/support/I733-034R-2007.pdf
http://www.nsa.gov/ia/_files/factsheets/TSA-13-1019-FS.pdf
https://code.google.com/p/skipfish/
http://google-gruyere.appspot.com/
http://www.google.com/about/appsecurity/tools/
http://googleonlinesecurity.blogspot.com/2010/11/rewarding-w...
http://www-01.ibm.com/software/tivoli/governance/security/ap...
http://www-01.ibm.com/software/tivoli/products/security-netw...
http://msdn.microsoft.com/en-us/library/ff649874.aspx
http://msdn.microsoft.com/en-us/library/ff649461.aspx
Source: typing "web application security" into google.com
You could probably also search for "Hacking Forums" or something similar and find lots of black hat resources.
It covers the process of a web application test and explains 90% of the vulnerabilities you'll find in web apps and how to test for them.