How Applications Get Broken

The vulnerability classes that account for most real breaches, each built and then broken so you can see the mechanism: injection in its several forms, cross-site scripting, request forgery, server-side request forgery, and the file and deserialisation paths that turn data into code.