Here starts a great insight/tutorial against a SalesForce Web Application Penetration Test.
Sales Force is a pretty common Web App.
Here’s a larger explanation of it.
Here’s the first part of the tutorial I’m speaking about:
Where OSINT, Hacking, Penetration Testing, Privacy, Piracy, Information Security, Cyber Security and Law are a lifestyle.