Open Web Application Security Project (OWASP) – Testing Guide

Open Web Application Security Project (OWASP) – Testing Guide

This link provides information about one methodology for web application penetration testing