Pentest Checklist

What it does

This skill provides a comprehensive penetration testing checklist to guide security assessments. It covers various stages of a pentest, including reconnaissance, scanning, exploitation, and reporting. The checklist aims to ensure thoroughness and consistency in the testing process by providing structured steps and considerations for each phase.

When to use it

• When preparing for a penetration test engagement to ensure all necessary steps are considered.
• During vulnerability assessments to systematically identify potential weaknesses.
• For creating repeatable pentest procedures within an organization.
• To serve as a training tool for junior security professionals learning about penetration testing methodologies.

Key capabilities

• Provides a structured checklist of penetration testing phases.
• Covers reconnaissance, scanning, exploitation and reporting stages.
• Offers guidance on consistent and thorough pentesting practices.

Example prompts

• "Generate a pentest checklist for a web application."
• "What are the key steps in the reconnaissance phase of a penetration test?"
• "Give me an overview of common vulnerabilities to look for during scanning."

Tips & gotchas

This skill assumes some basic understanding of security concepts and terminology. The generated checklists should be adapted based on the specific scope and objectives of each engagement.