security-pen-testing

To run an OWASP Top 10 vulnerability scan, this skill applies systematic offensive security testing methodologies to web applications, executing automated checklists and manual tests to discover authentication bypass, IDOR, and injection vulnerabilities.

Testing for API security vulnerabilities like BOLA and IDOR requires specialized offensive security assessments that execute targeted checks for authentication bypass and broken object-level authorization, systematically identifying exposure before exploitation.

Generating professional security audit reports with CVSS scoring is supported natively, automatically compiling vulnerability findings and static analysis results into structured reports containing actionable remediation guidance.

Dependency vulnerability scanning and secret detection are fully supported during systematic security audits, helping triage vulnerable libraries and exposed credentials before they compromise web applications or infrastructure.

Python is required as a dependency to perform static analysis and penetration testing, executing the offensive security scripts and automated checklists needed to assess web application and infrastructure vulnerabilities.

Offensive security testing is a proactive assessment methodology to discover vulnerabilities through simulated attacks, needed when you must satisfy authorized security audit requirements or validate infrastructure resilience before deployment.