I'm writing a simple web framework for a project of mine and need to ensure that the websites it produces are secure. In order to check this I thought I might as well just try and hack my own website while it still has dummy data and doesn't matter if I lose any information. I can always just destroy the server and start again.
I was wondering if there were any books that ran through the process of hacking a website? I am familiar with protecting against SQL injection attacks but not quite so familiar about click jacking, cross site scripting and other related vulnerabilities which are common on websites. I need to be able to exploit them on my own website so I can understand how to protect against them on the back-end.
Unfortunately I have no books on these subjects and have no idea where to start. How did you get going with website security? How do you ensure your website is free from exploits when you deploy it to production?