pentest

name	pentest
description	Run an automated security assessment — find internet-exposed resources, attack paths, and network vulnerabilities.
user-invocable	true

Pen Test — Automated Security Assessment

Run an automated security assessment to find internet-exposed resources and attack paths.

What to do

Read shasta.config.json for python_cmd. Use that for all commands (shown as <PYTHON_CMD>).

1. Run the assessment:

   <PYTHON_CMD> -c "
   import json
   from shasta.config import get_aws_client
   from shasta.aws.pentest import run_security_assessment, save_pentest_report
   
   client = get_aws_client()
   client.validate_credentials()
   print('Running automated security assessment...')
   report = run_security_assessment(client)
   path = save_pentest_report(report)
   print(json.dumps({
       'report_path': str(path),
       'exposed_resources': len(report.exposed_resources),
       'attack_paths': len(report.attack_paths),
       'network_findings': len(report.network_findings),
       'resources': [{
           'id': r.resource_id, 'type': r.resource_type,
           'exposure': r.exposure_type, 'ports': r.ports[:10],
       } for r in report.exposed_resources],
       'paths': report.attack_paths,
   }, indent=2))
   "
   

2. Present like a pen test debrief: exposed resources, attack paths with risk ratings, remediation. Recommend running quarterly for audit evidence.