workflow
Step-by-step methodology for auditing web application security. Covers XSS, CSRF, SQL injection, auth bypass, input validation, and reporting.