Web application security checklist Basically a combination between Owasp web application testing guide and Web application hackers handbook.