OWASP / wstg

A community-written guide covering methods and test cases for security testing web applications and web services.

OWASP / Top10

Official repository for the OWASP Top 10 document, a ranked list of the most critical web application security risks.