u/Nimbax

Hello I'm a beginner when it comes to web knowledge.

I come from a Malware Analysis background, but I have no idea (aside from Portswigger) how to start learning Web Application Security but in a pen testing side-view. What do you advice from those 4 (or others) and why?

And lastly if you have any http books to advice.

Thank you in advance!