Well yes, that is exactly what that is. However, you made it sound as if it were wrong for such a thing to exist. Without the proper context, how do we know tha

Well yes, that is exactly what that is. However, you made it sound as if it were wrong for such a thing to exist. Without the proper context, how do we know that that wasn't exactly what the author intended to do? Furthermore, in the later pages the document does mention the OWASP testing guide. Maybe the title is a bit misleading? Let a mod change it to the original one: "Tactical Web Application Penetration Testing Methodology"