OWASP Testing GuideThe OWASP Testing Guide (2009 Version 3. 0) includes a "best practice" penetration testing framework which users can implement in their own organizations and a "low level" penetration testing guide that describes techniques for testing most common web application and web service security issues. OWASP Testing Guide v3 is a 349 page book; we have split the set of active tests in 9 sub categories for a total of 66 controls to test during the Web