I bought the first one and it was brilliant. I've known Daf (the author) for a few years now, he's also the author of the amazing Burp Suite[1] - if you're a de

I bought the first one and it was brilliant. I've known Daf (the author) for a few years now, he's also the author of the amazing Burp Suite[1] - if you're a developer do try the free version then consider getting the pro suite, which has a stupid volume of features for a relatively small amount of money. WAHH should be standard reading for anyone that wants to learn about Web Application attacks. I'd also highly recommend the Shellcoder's Handbook (although that could do with an update too). I will definitely be buying both the 2nd edition of WAHH and the try it bits too when it comes out. [1] - http://www.portswigger.net/ http://www.portswigger.net/