Планирование и проведение пентеста

★ 6.6 · security

pentest-checklist is a Claude Code skill that guides users through planning, executing, and following up on penetration testing engagements using a structured, phase-based methodology. It covers five test types — external, internal, web application, social engineering, and Red Team — and walks through scope definition (objectives, boundaries, threat enumeration, budget planning), environment preparation (production/staging/clone decision, preliminary scans with nmap and nikto, cloud provider authorization for AWS, Azure, and GCP), and expertise selection with methodology choice among PTES, OWASP, and NIST. Outputs include a defined pentest scope, security monitoring data, a vulnerability findings report, and a remediation plan. The skill suits security professionals and teams seeking compliance validation against GDPR, PCI-DSS, or HIPAA, or anyone running a systematic security assessment of their infrastructure.