Books
Books that should be part of every web application security tester's library, especially for using Burp Suite:
If you are a web application penetration tester, you should get the Web Application Hacker's Handbook, Dafydd Stuttard and Marcus Pinto, Wiley. This is the de facto book on web application security.
Get the Instant Burp Suite Starter, Luca Carettoni, Packt Publishing, to get started quickly on using Burp Suite.
The Tangled Web: A Guide to Securing Modern Web Applications, Michal Zalewski, No Starch Press. He is the author of the extremely informative Browser Security Handbook as well: https://code.google.com/p/browsersec/wiki/Main.
