Menu
Penetration Testing and Analyses
Web cache poisoning — unkeyed header/parameter injection to serve malicious content to all users
CORS misconfiguration testing — origin reflection, wildcard bypass, null origin, credential leakage
GraphQL vulnerability testing — introspection exposure, complexity DoS, batch abuse, mutation auth bypass
Host header injection — password reset poisoning, cache poisoning, routing bypass, SSRF via Host
IDOR automated testing — cross-account access, horizontal/vertical privilege escalation, mass data exposure
JWT token attacks — alg:none bypass, key confusion, claim tampering, signature stripping
| name | RA-5(9)_penetration-testing-and-analyses |
| description | Penetration Testing and Analyses |
| category | information-gathering |
| version | 5.2.0 |
| author | cyberstrike-official |
| tags | ["nist","sp800-53","rev5","ra-5-9","ra","enhancement"] |
| tech_stack | ["any"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | ["RA-5"] |
| severity_boost | {} |
Enhancement of: RA-5
Family: Risk Assessment (RA) Framework: NIST SP 800-53 Rev 5
No description available.
Examine the System Security Plan (SSP) and related artifacts for RA-5(9) implementation details. Verify the organization has documented how this control is satisfied.
# For cloud environments, use cloud-audit-mcp tools
# For on-premises, review system configurations directly
# Example: Check if account management policies exist
grep -r "account.management\|access.control" /etc/security/ 2>/dev/null
Verify the control is actively functioning, not just documented. Check logs, configurations, and operational evidence.
| Tool | Purpose | Usage |
|---|---|---|
| Manual Review | Documentation and interview-based | N/A |
Refer to NIST SP 800-53 Rev 5 for the full control statement.
Implement this control per organizational risk assessment and system categorization.
| Finding | Severity | Impact |
|---|---|---|
| RA-5(9) Penetration Testing and Analyses not implemented | Medium | Risk Assessment |
| RA-5(9) partially implemented | Low | Incomplete Risk Assessment |
| CWE ID | Title |
|---|---|
| N/A | No direct CWE mapping |