Concise and to the point, the "Web Application Auditing Over Lunch" guide, by Johannes Ullrich of the SANS Institute, lists the most important processes and tools for running basic security checks on web applications and briefly details the most common problems and how to detect them.
- Dr. Johannes B. Ullrich: Web Application Auditing Over Lunch