Pentest Checklist

What it does

This skill provides a comprehensive penetration testing checklist to guide security assessments. It outlines key areas of focus, including reconnaissance, scanning, exploitation, and post-exploitation phases. The checklist aims to ensure thoroughness and identify potential vulnerabilities in target systems or networks.

When to use it

• Planning a pentest: Use the checklist as a framework for defining scope and objectives.
• Conducting vulnerability assessments: Employ the list to systematically evaluate security controls.
• Reviewing existing pentest reports: Compare findings against the checklist to identify any gaps or missed areas.
• Training junior pentesters: Serve as a guide for new team members learning penetration testing methodologies.

Key capabilities

• Comprehensive checklist covering multiple phases of penetration testing.
• Structured approach to security assessments.
• Guidance on key areas within each phase (reconnaissance, scanning, exploitation, post-exploitation).

Example prompts

• "Generate a pentest checklist for assessing the security of a web application."
• "Give me a detailed breakdown of reconnaissance activities in a penetration test."
• "What are some common vulnerabilities to look for during the exploitation phase?"

Tips & gotchas

This skill assumes a basic understanding of penetration testing concepts. The checklist is intended as a guide and may need to be adapted based on specific engagement requirements.