Start of a pentesting methodology by bugcrowd.com.  So many areas to test but there is a lot included in the graphic.