The exact web application penetration testing methodology we run on engagements, from mapping the app to chaining low findings into a real breach and retesting the fix.