# Web & Application Security

> Web application security and hacking guides covering SQL injection, XSS, API attacks, HTTP internals and full web pentest methodology, from beginner level to advanced exploitation.

Canonical: https://resources.codelivly.com/product-category/web-application-security/

Web application security and hacking guides covering SQL injection, XSS, API attacks, HTTP internals and full web pentest methodology, from beginner level to advanced exploitation. Built for bug bounty hunters, pentesters and developers who want to see how web apps really break.

## Books (9)

- [Web Hacking Essentials: XSS & SQLi Pocket Guide](https://resources.codelivly.com/product/web-hacking-essentials-xss-sqli-pocket-guide/) (Free) - Grab this free XSS payload cheat sheet PDF: reflected, stored and DOM payloads, filter bypasses, Burp Suite workflows and proven defenses. Download it now.
- [The Ultimate Virtual Private Network (VPN) Guide](https://resources.codelivly.com/product/the-ultimate-virtual-private-network-vpn-guide/) (Free) - Download this free VPN guide PDF and learn tunneling, encryption, kill switches and how OpenVPN, IKEv2 and WireGuard compare. Plain English, zero cost.
- [Mastering HTTP: The Backbone of the Web](https://resources.codelivly.com/product/mastering-http-the-backbone-of-the-web/) (£4.99) - An HTTP protocol book for developers: requests, headers, status codes, HTTPS and TLS, HTTP/2 and HTTP/3, plus cURL and Postman debugging. Get your copy.
- [Hack the Web: The Secrets Behind How the Internet Really Works](https://resources.codelivly.com/product/hack-the-web-how-the-internet-really-works/) (£14.99) - A how the internet works ebook that walks you from DNS and packets to TLS handshakes, cookies, SQL injection and DevSecOps. Buy it and see the web clearly.
- [Practical Man-in-the-Middle Attacks in Computer Networks](https://resources.codelivly.com/product/practical-man-in-the-middle-attacks-in-computer-networks/) (£6.99) - This man in the middle attack book PDF covers ARP poisoning, DNS spoofing, evil-twin Wi-Fi and SSL interception with real tools and defenses. Get your copy.
- [Web Application Hacking L1](https://resources.codelivly.com/product/web-application-hacking-level-1/) (£14.99) - A web application hacking book for beginners: 200 hands-on pages on Burp Suite, the OWASP Top 10, injection, XSS and reporting. Start finding real bugs today.
- [SQL Injection Notes: Professional Guide](https://resources.codelivly.com/product/sql-injection-notes-professional-guide-by-codelivly/) (£4.99) - SQL injection notes PDF covering in-band, blind, time-based and out-of-band SQLi, database-specific payloads, SQLMap workflows and defenses. Grab your copy.
- [Web Application Hacking L2](https://resources.codelivly.com/product/web-application-hacking-l2/) (£19.99) - An advanced web application penetration testing book: 501 pages on trust boundaries, business logic flaws, chained attacks and secure code review. Buy now.
- [Hacking Your First APIs: The Hands-On Guide to Finding and Exploiting API Vulnerabilities](https://resources.codelivly.com/product/hacking-your-first-apis/) (£24.99) - An API hacking book for beginners: 227 pages and 40 chapters of hands-on labs covering BOLA, JWT and OAuth attacks, SSRF and GraphQL abuse. Start hacking.

## Related

- [All books](https://resources.codelivly.com/shop/)