Penetration Techniques/Tool Used in the Testing

["Reza CTR Ghaffari" <Reza.CTR.Ghaffari () faa gov>]

Hi,

Where can I get a listing of the most commonly used Penetration testing
techniques within past twelve months. I would appreciate any input (white paper,
specific web site, individual, institute or company name and phone numbers) that
you could provide me. I would like to collect any statistical data regarding
usage of these techniques if they are available. 
I am also looking to find a list of top twenty or so vulnerabilities
existing/introduced in the past twelve months. Backup data for each
vulnerability would be helpful too. 
I am writing a paper and like to cross reference list of the vulnerabilities
with the penetration techniques that could identify the listed vulnerabilities
in the tested system/network. Thank you

Regards,
Reza Ghaffari
Email: Reza.CTR.Ghaffari () faa gov