[Merkuri]

In my opinion practice make perfect - smashthestack.org. Of course you have to be able to program at least in C and understand assembly. About learning source I can recommend OpenSecurity training. http://opensecuritytraining.info/Training.html There are great Assembly lectures. Also greate lectures about Buffer overflows. You may want to take a look at introduction to reverse engineering.