The Web Application Hacker's Handbook by John B. Stuttard, Dafydd Stuttard & Marcus Pinto