http://www.amazon.com/The-Software-Security-Assessment-Vulne...
Beyond that add in a bit of system administration knowledge e.g. in-depth knowledge of operating systems and networking, and you have everything you need to break many many systems!
Fresh book recommendations delivered straight to your inbox every Thursday.
http://www.amazon.com/The-Software-Security-Assessment-Vulne...