OWASP Top 10, SANS 25 NIST, PCI and all applicable industry standard security frameworks are the usual standard documents that are followed for VAPT.