Web Application Security in Depth

OWASP Top 10, business logic flaws, and zero-day discovery — the definitive penetration testing framework for practitioners.