Web Application Hacker's Handbook

This new book about web hacking is quite an encyclopedic reference. There's a few decent web security books out there, including one in the Hacking Exposed series, but I don't think I've seen anything quite like this.

The Web Application Hacker's Handbook by Dafydd Stuttard and Marcus Pinto and published last week by Wiley is a compendium of the whole universe of web hacking.

It lists not only attacks and types of attacks but how to enumerate web sites and their servers, attack methodologies, hacking tools and attacking their hosting servers, as well.