https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Proje... https://www.owasp.org/index.php/

https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Proje... https://www.owasp.org/index.php/Top_10_2013-Top_10 https://www.owasp.org/index.php/Top_10_2013-Top_10 http://www.nsa.gov/ia/_files/support/I733-034R-2007.pdf http://www.nsa.gov/ia/_files/support/I733-034R-2007.pdf http://www.nsa.gov/ia/_files/factsheets/TSA-13-1019-FS.pdf http://www.nsa.gov/ia/_files/factsheets/TSA-13-1019-FS.pdf https://code.google.com/p/skipfish/ https://code.google.com/p/skipfish/ http://google-gruyere.appspot.com/ http://google-gruyere.appspot.com/ http://www.google.com/about/appsecurity/tools/ http://www.google.com/about/appsecurity/tools/ http://googleonlinesecurity.blogspot.com/2010/11/rewarding-web-application-security.html http://googleonlinesecurity.blogspot.com/2010/11/rewarding-w... http://www-01.ibm.com/software/tivoli/governance/security/application-security.html http://www-01.ibm.com/software/tivoli/governance/security/ap... http://www-01.ibm.com/software/tivoli/products/security-network-intrusion-prevention/web-application-security.html http://www-01.ibm.com/software/tivoli/products/security-netw... http://msdn.microsoft.com/en-us/library/ff649874.aspx http://msdn.microsoft.com/en-us/library/ff649874.aspx http://msdn.microsoft.com/en-us/library/ff649461.aspx http://msdn.microsoft.com/en-us/library/ff649461.aspx Source: typing "web application security" into google.com You could probably also search for "Hacking Forums" or something similar and find lots of black hat resources.