OWASP Testing Guide

The OWASP Testing Guide (2009 Version 3.0) includes a "best practice" penetration testing framework which users can implement in their own organizations and a "low level" penetration testing guide that describes techniques for testing most common web application and web service security issues. OWASP Testing Guide v3 is a 349 page book; we have split the set of active tests in 9 sub-categories for a total of 66 controls to test during the Web Application Testing activity. For more information, please check out the project home page at <a href="http://www.owasp.org/index.php/Category:OWASP_Testing_Project"> OWASP Testing Guide V3.0 Project</a>.