Does it help with post-test activities?

Absolutely. It includes a dedicated remediation phase for prioritizing findings, implementing fixes, and verifying resolutions, as well as cleanup procedures.

Can I use this for cloud-based applications?

Yes, it includes specific guidance and authorization links for major cloud providers like AWS, Azure, and GCP to ensure compliance with their testing policies.

What testing methodologies does this skill support?

The skill provides guidance for industry-standard methodologies including PTES (Penetration Testing Execution Standard), OWASP, and NIST.

Is this skill appropriate for internal security teams?

Yes, it is designed for both internal teams performing self-assessments and project managers coordinating with external security firms.

Pentest Checklist

Name: Pentest Checklist
Author: claudiodearaujo

byclaudiodearaujo

0•

安全与测试

Guides users through the end-to-end process of planning, executing, and remediating penetration tests with structured methodologies.

The Pentest Checklist skill provides a comprehensive framework for security professionals and developers to manage the entire lifecycle of a penetration testing engagement. It offers detailed guidance on scoping objectives, preparing environments (production vs. staging), selecting the right testing methodology (Black, Gray, or White box), and establishing robust monitoring and remediation workflows. By following this standardized approach, teams can ensure thorough coverage, maintain compliance with regulations like GDPR or PCI-DSS, and effectively track vulnerability resolution across web applications, networks, and cloud infrastructure.

主要功能

01Multi-phase framework covering Scope, Prep, Selection, Monitoring, and Remediation

020 GitHub stars

03Detailed environment preparation and post-test cleanup procedures

04Support for industry-standard methodologies including OWASP, PTES, and NIST

05Cloud provider policy integration for AWS, Azure, and Google Cloud Platform

06Security monitoring setup and log configuration patterns

使用场景

01Defining and documenting the scope and boundaries for a third-party security audit

02Creating a structured remediation plan to track and verify vulnerability fixes

03Planning a comprehensive security assessment for a web application or corporate network

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add claudiodearaujo/sistema-de-narra-o-de-livro-front pentest-checklist

For use in Claude.ai and ChatGPT

Download Skill