web-methodology. Methodology for high-quality web application security testing - https://github.com/tprynn/web-methodology/wiki