Penetration Testing by Georgia Weidman

The bible of web pentesting. Covers all web vulnerabilities in depth.

Red Team edition. Advanced offensive strategies used in simulations.

Classic on binary exploitation. Buffer overflows, shellcode and more.

Practical guide to analyze and dissect malware. Very hands-on.