WSTG Checklist

If you are looking for a nice checklist for your web app pentest, this one can help you a lot.