OWASP / wstg

A community-written guide covering methods and test cases for security testing web applications and web services.