pentest-checklist-lookup

name

pentest-checklist-lookup

description

Resolve a stable pentest-template checklist ID (e.g. WEB-AUTHN-04, AD-KRB-02, CLD-AWS-IAM-07, IOT-FW-05, RT-INIT-03, LLM-PI-03) to its full methodology, references, mappings, how-to-test block, and accept criteria. Use when the user mentions a checklist ID, asks to "look up <ID>", "what does <ID> say", "show me <ID>", "find checklist items mapped to CVE-XXXX", "find items mapped to ATT&CK Tnnn", "find items by CWE-NNN", or wants to navigate the templates by stable identifier.

Pentest Checklist Lookup

Resolve a stable ID or framework reference to the matching checklist item(s) in the pentest-templates library.

Library root

$PENTEST_LIBRARY — caminho absoluto deste repositório clonado (definido pelo instalador; veja INSTALL.md).

ID format (per CONVENTIONS.md)

<TYPE>-<PHASE_LETTERS>-<NN> — examples:

ID example	Means
WEB-AUTHN-04	Web/API → authentication phase → item 04
AD-KRB-02	Active Directory → Kerberos attacks → item 02
AD-ADCS-ESC1	Active Directory → ADCS attacks → ESC1 catalog item
RT-INIT-03	Red team → initial access → item 03
IOT-FW-05	IoT/OT → firmware analysis → item 05
CLD-AWS-IAM-07	Cloud → AWS IAM privesc → item 07
LLM-PI-03	AI/LLM → prompt injection → item 03

IDs are stable and additive; new items append rather than reorder.

How to operate

By stable ID

grep -REn '^### \[<ID>\]' "$PENTEST_LIBRARY"/0[0-9]-* "$PENTEST_LIBRARY"/1[0-9]-*

When found, Read the matching file at the discovered line and return:

• Title + Objective.
• References, Mappings, Risk, Suggested CVSS.
• Methodology numbered steps.
• Expand the <details>How to test</details> block (commands, payloads).
• Accept criteria + Fail/Finding example.

By framework reference

Common pivots:

# By CVE
grep -RIn --include='*.md' 'CVE-2021-1675' "$PENTEST_LIBRARY"

# By MITRE ATT&CK technique
grep -RIn --include='*.md' 'T1558.003' "$PENTEST_LIBRARY"

# By CWE
grep -RIn --include='*.md' 'CWE-89' "$PENTEST_LIBRARY"

# By WSTG / MASTG / API Top 10 token
grep -RIn --include='*.md' 'WSTG-AUTHN-04' "$PENTEST_LIBRARY"
grep -RIn --include='*.md' 'MASTG-TEST-' "$PENTEST_LIBRARY"
grep -RIn --include='*.md' 'API:2023:5' "$PENTEST_LIBRARY"

Return the list of matches grouped by file, so the user can pick.

By keyword (fallback)

grep -REn -i --include='*.md' '<keyword>' "$PENTEST_LIBRARY"/0[0-9]-*

Always return file path + line number so the user can jump (file_path:line_number).

When NOT to use

• The user wants the full phase walkthrough → use the type-specific pentest-* skill.
• The user wants a quick command without methodology → pentest-cheatsheet.

File-discovery tips (from USAGE.md)

• Find every checklist item touching a CVE: grep -R "CVE-XXXX-YYYY" .
• Find ATT&CK technique mappings: grep -R "TXXXX.YYY" .
• Find skeleton / incomplete files: grep -lR "status: stub" .
• Find frameworks references: see frameworks/.