The Web Application Hacker's Handbook: Discovering and Exploiting Security Flaws
"If you have an interest in web application security, I would highly recommend picking up a copy of this book, especially if you’re interested in being able to audit applications for vulnerabilities".—Robert Wesley McGrew,McGrew Security