A good framework is a great resource for any pentester . Here are some of the best I found : The mindmap written by Toggmeister (a.k.a. Kev Orrey) & Lee J Lawson http://www.vulnerabilityassessment.co.uk/Penetration%20Test.html OSSIG http://www.oissg.org/ OSSTMM http://www.isecom.org/osstmm/ OWASP http://www.owasp.org