Anyone recommend a good web application penetration test books? I've been tasked with doing a bunch of pen-tests against websites lately.

I have 2 currently:
_Hacking Exposed Web Applications_ by Joel Scambray and Mike Shema
_Web Hacking: Attacks and Defense_ by McClure, Shah, Shah

Any others I should look at? Thanks in advance.