Re: Question about a book

[Bipin Upadhyay <muxical.geek () gmail com>]

Brent Huston wrote:
> I would skip the book if you are going to do risk assessment instead of 
> application assessments... A better guide would likely be the high level 
> OWASP stuff at http://www.owasp.org.
Agreed.
More specifically, you could get the "OWASP Testing Guide".

Additonaly, you could have look at "Professional Pen Testing for Web 
Applications" - Andres Andreu.

[SNIPPED]

HTH,
Bipin "Om" Upadhyay,
http://projectbee.org