Social Engineering: The Science of Human Hacking
Christopher Hadnagy
Web application Pentesting Methodology
Francisco Caballero S21sec