pentest-checklist

Provide a comprehensive checklist for planning, executing, and following up on penetration tests. Ensure thorough preparation, proper scoping, and effective remediation of discovered vulnerabilities. Reference Questions: Budget Reality Check: Environment Options: Common Pre-Scan Tools: Cloud Provider Policies: Evaluation Criteria: Testing Approaches: Report Should Include: Monitoring Tools: Key Logs to Monitor: Testing Frequency Factors: This skill is applicable to execute the workflow or actions described in the overview. - Clear business objectives for testing - Target environment information - Budget and timeline constraints - Stakeholder contacts and authorization - Legal agreements and scope documents - Defined pentest scope and objectives - Prepared testing environment - Security monitoring data - Vulnerability findings report - Remediation plan and verification - Why are you doing this pentest? - What specific outcomes do you expect? - What will you do with the findings? - Cheap pentests often produce poor results - Align budget with asset criticality - Consider ongoing vs. one-time testing - AWS: - Azure: - GCP: - Executive summary for management - Technical findings with evidence - Risk ratings and prioritization - Remediation recommendations - Retesting guidance - Authentication events - Application errors - Network connections - File access - System changes -...