In Web Security:
- The Tangled Web (http://lcamtuf.coredump.cx/tangled/)
You can look at the Web Application Hacker's Handbook or the Browser Hacker's Handbook, if you want. But TTW tops them all.
You can look at the Web Application Hacker's Handbook or the Browser Hacker's Handbook, if you want. But TTW tops them all.
This book will give you the fundamentals of application security testing.
Hacking, 2nd Edition - Introduces the foundations of memory and network exploitation
[Security Engineering](https://www.cl.cam.ac.uk/~rja14/book.html) - An overview of a huge array of info sec topics, from "E-policy" to nuclear command security.
Advanced Penetration Testing - Focuses on simulating APT attacks, using the author's penetration testing experiences to illustrate each point.