I would recommend that you check out the OSSTMM to learn about security testing methodolgy first.

Then there is a pretty comprehensive, if a bit old, list of the top 75 tools used by security professionals that can be found over at Insecure.org.

Hope those two help you on your way.