pentest-playbook

What problem does it solve?

This Skill eliminates the risk of incomplete, disorganized penetration testing engagements by providing a field-validated, standardized 7-phase workflow that ensures all critical recon, exploitation, and reporting steps are followed for any target type, reducing missed vulnerabilities and inconsistent results.

Core Features & Use Cases

• Standardized 7-Phase Pipeline: Covers the full pentest lifecycle from passive OSINT to final reporting, with clear phase goals, duration estimates, and mapped specialized skills for each step.
• Pivot Decision Framework: Includes explicit triggers to switch attack vectors when brute force or direct exploitation fails, preventing wasted time on low-probability approaches.
• Sector-Validated Methodology: Distilled from 100+ real-world targets across government, healthtech, fintech, e-commerce, ISP, and SMB sectors, ensuring real-world applicability.
• Use Case: For a new pentest engagement against an unknown fintech target, use this playbook to structure your work from initial subdomain enumeration through final vulnerability reporting, following proven steps instead of ad-hoc testing.

Quick Start

Use the pentest-playbook skill to structure your next full penetration test engagement from initial passive reconnaissance through final reporting, following the 7-phase workflow and pivot guidelines to maximize finding quality and efficiency.