Web application security is a trending domain for every e-business organization. Web applications are facing attacks from different levels of threats. Here, different kinds of testing methodologies, tools, and scenarios have been proposed by different authors to productively perform and analyze web application security. Here, reviewing of data about web application security testing is performed as a literature survey. This review paper overviews web application security testing in different scenarios. It covers testing tools and their methodologies for security testing such as analysis of threats and applications. The performance analysis will give awareness to who performs security testing in web applications. Hence, web application penetration testing will help organizations to keep their web applications safe and secure.