pentest-checklist

原文涵盖的主题

• Pentest Checklist
• Purpose
• Inputs/Prerequisites
• Outputs/Deliverables
• Core Workflow
• Phase 1: Scope Definition
• Define Objectives
• Know Your Test Types

Provide a comprehensive checklist for planning, executing, and following up on penetration tests. Ensure thorough preparation, proper scoping, and effective remediation of discovered vulnerabilities. Clear business objectives for testing Target environment information Budget and timeline constraints Stakeholder contacts and authorization Legal agreements and scope documents Defined pentest scope and objectives Prepared testing environment Security monitoring data Vulnerability findings report Remediation plan and verification [ ] Clarify testing purpose - Determine goals (find vulnerabilities, compliance, customer assurance) [ ] Validate pentest necessity - Ensure penetration test is the right solution [ ] Align outcomes with objectives - Define success criteria Reference Questions: Why are you doing this pentest? What specific outcomes do you expect? What will you do with the findings? | Type | Purpose | Scope | |------|---------|-------| | External Pentest | Assess external attack surface | Public-facing systems | | Internal Pentest | Assess insider threat risk | Internal network | | Web Application | Find application vulnerabilities | Specific applications | | Social Engineering

这里只展示节选，请以完整原文和当前要求为准。