The Shellcoder's Handbook: Discovering and Exploiting Security ...
Chris Anley & John Heasman & Felix Lindner & Gerardo Richarte
Web application Pentesting Methodology
Francisco Caballero S21sec