(OWASP helps everyone understand the web usage program, the introduction of the system how to test the web usage, not just providing a simple vulnerability list or testing method, but a complete testing structure to conduct detailed penetration/penetration testing of the system, vulnerability detection.
OWASP Test Guide (Chinese).pdf)