Saad Elie, Mitchell Rick. Web Security Testing Guide v4.2

The OWASP Foundation, 2020. — 465 p.The WSTG is a comprehensive guide to testing the security of web applications and web services. Created by the collaborative efforts of cybersecurity professionals and dedicated volunteers, the WSTG provides a framework of best practices used by penetration testers and organizations all over the world.