penetration-testing

name	penetration-testing
description	Use when planning or conducting authorized penetration tests against web applications, APIs, networks, and mobile apps. Covers pen testing methodologies (OWASP, PTES, OSSTMM), scoping and rules of engagement, tool selection, reporting, and remediation verification. USE FOR: penetration testing, pen test methodology, PTES, OSSTMM, OWASP Testing Guide, web app pen testing, API pen testing, network pen testing, mobile pen testing, vulnerability assessment, bug bounty, responsible disclosure, rules of engagement DO NOT USE FOR: automated security scanning in CI/CD (use security-testing), threat modeling before implementation (use threat-modeling), AI/LLM-specific adversarial testing (use ai-security or red-teaming)
license	MIT
metadata	{"displayName":"Penetration Testing","author":"Tyler-R-Kendrick"}
compatibility	claude, copilot, cursor
references	[{"title":"OWASP Web Security Testing Guide","url":"https://owasp.org/www-project-web-security-testing-guide/"},{"title":"Penetration Testing Execution Standard (PTES)","url":"http://www.pentest-standard.org"},{"title":"NIST SP 800-115 Technical Guide to Information Security Testing","url":"https://csrc.nist.gov/publications/detail/sp/800-115/final"}]