Nangia & Co interview question

How you will do pentesting Testing on a web application? Tell me from scratch.