Technical Guide to Information Security Testing and Assessment (SP 800-115)

Covers PCI DSS penetration testing requirements, methodology, and reporting. Essential reading for security professionals working with payment card environments.

PCI Security Standards Council

Provides a framework for planning, executing, and managing penetration testing programs. Includes case studies and best practices from CREST member organizations.

CREST

Step-by-step guide to ethical hacking and penetration testing fundamentals. Covers reconnaissance, scanning, exploitation, and maintaining access using Kali Linux tools.

Patrick Engebretson

Comprehensive hands-on guide covering Metasploit, social engineering, web application attacks, wireless hacking, and mobile device testing. Builds a complete penetration testing lab from scratch.

Georgia Weidman