This is a whitepaper that goes over methodologies for web application penetration testing. It is very thorough with examples and overviews. Continue reading...