The Web Security Testing Guide - a methodology for web app testing.
Link goes to the official source. We never mirror or host binaries. Use only on systems you own or are authorized to test.