Get some fundamental material about TCP/IP, ports and sockets, and
iptables too. . .
I don't know how you can cover penetration testing without
understanding encryption.
I'd give him a linux box and have him learn how to use openssh and
openssl fluently.  Really, if he's interested in it, no text books
will make up for a good sandbox.

Hacking: the Art of Exploitation is an excellent book, I will say


--
Todd Millecam
--------------------
BYU Unix Users Group
http://uug.byu.edu/

The opinions expressed in this message are the responsibility of their
author.  They are not endorsed by BYU, the BYU CS Department or BYU-UUG.
___________________________________________________________________
List Info (unsubscribe here): http://uug.byu.edu/mailman/listinfo/uug-list