Solid Methodology - http://blog.zsec.uk/ltr101-method-to-madness/

Introduction (left hand side) - http://securityidiots.com/index.html

Various Web Exploits - https://google-gruyere.appspot.com/part1