OWASP Testing Guide
This guide is best viewed as a set of techniques that you can use to find different types of security holes.