Web Hacking Arsenal: A Practical Guide to Modern Web Pentesting

The detail in this book is actually impressive. I've gone through quite a few web app security books in The past, but if I had to choose one, I would choose this one. I don't think it missed any of the vulnerability types, and it also explains the basics before getting into the more advanced stuff. A beginner could easily understand it, but it's also very helpful for someone who's been doing this for 5+ years.

I have read several books on web pentesting, but most of them are presented with outdated information and hypotehtical scenarios. Web Hacking Arsenal exceeds my expectations in this regards. It is modern day equivalent of Web Hackers Handbook and offers coverage

Before this book I though hackersplaybook is good but after reading couple if chapters this book is a must go for web pen-testers. Would recommend to every beginner.