I am a manual tester with limited knowledge of how to code. How to approach the security testing of a web site. Are there any good tools/sites/docs/ or classes preferably for security testing where i can learn from them?
I would start here: https://www.owasp.org/index.php/Main_Page
Lots of good reading, tools, videos, etc.
Pls find useful links (references) to get started
BurpSuite and Fiddler are two important tools for my security testing tasks. Definitely check them out.
As for the approach I have found it is good to find out if your organization is required to allow 3rd party audits and security scans. Make sure your security tests cover these cases first. Then move to the most sensitive areas. Usually anything to do with authentication, sessions, user authorization levels and money transactions are a good place to start. It may be controversial to say this but as far as security goes I feel that the low hanging fruit / obvious exploits are a good place to start. Most attackers will try those first as well.