[corndoge]

I recommend "The Art of Software Security Assessment" (Dowd, Mcdonald, Schuh) if you want a exhaustive book on the subject.

[wglb]

And in addition, The Bug Hunter's Diary: https://nostarch.com/bughunter