Hi this is my first attempt to include some information in the field of security testing of web application . Here i would like to share some of the tips and tricks that are useful in securing web applications .
Firstly a novice user must be familer with some of the basic topic which would be listed below .
I would be also be giving detailed information how to break into the application and ways how to prevent them . Below is the list of proxy tools that i have used and worked upon . its simple and easy to understand.

• Tamper data (Mozilla addon) 
• Paros Proxy .
• Web scarap 

I would be later giving the detailed demo of the above mentioned tools .

The OWASP Top 10 Web Application Security Risks for 2010 are:

• A1: Injection
• A2: Cross-Site Scripting (XSS)
• A3: Broken Authentication and Session Management
• A4: Insecure Direct Object References
• A5: Cross-Site Request Forgery (CSRF)
• A6: Security Misconfiguration
• A7: Insecure Cryptographic Storage
• A8: Failure to Restrict URL Access
• A9: Insufficient Transport Layer Protection
• A10: Unvalidated Redirects and Forwards

I would be giving detailed description about the top 10 security risks in my upcoming posts .

There are also some free and open source security testing tools which detects the vulnerabilities in the web application . Usually all these tools are specific to web applications . For desktop applications there are other tools . Most widely used are :-

HP Web Inspect
IBM Appscan
Accunetix Web scanner
Armorize code secure .

Stay tuned for my next posts ....