I need a relevant text (scientific paper, book chapter etc.) that provides a full overview (big picture) about penetration testing. It should include as much complete, consistent and up-to-date as possible lists of:
- types of tests, what can all be pen tested (networks, web apps, wireless...)
- the most common attacks for every category above
- the most popular tools for some type of testing.
I don't need another text about white, gray and black box testing. Because of them I can't find what I'm looking for.
On Infosec I have found this classification:
- Network Services
- Web Application
- Client Side
- Social Engineering.
On some other sites, I have found different classification and every book I've found has it's own classification. I understand that maybe there is no single classification, but I need some good enough that the rest of that text (or book) is consistent with it's own classification. I have found many books that covers some random mix of attacks that falls in different categories and now I'm confused.