Overview

Web Application Testing Methodology

A structured assessment can generally be approached as:

Reconnaissance
      ↓
Technology Identification
      ↓
Attack Surface Mapping
      ↓
Content Discovery
      ↓
Authentication Testing
      ↓
Authorisation Testing
      ↓
Input Validation
      ↓
Server-Side Testing
      ↓
Client-Side Testing
      ↓
Business Logic Testing
      ↓
Validation
      ↓
Reporting

The exact methodology depends on the application, architecture and scope of the assessment.