Fundamental Please start from here ... developer.mozilla - For website basic OWASP Top 10 - Concept about top 10 bugs Web Security Academy - PortSwigger