Network Security Model
Josh Backfield
Web application Pentesting Methodology
Francisco Caballero S21sec