Penetration Tester

Penetration Tester is an automated security assessment skill that follows a structured methodology to identify and verify vulnerabilities in web applications, APIs, and network services. It follows the OWASP Testing Guide and PTES (Penetration Testing Execution Standard) frameworks.

How It Works

1. Reconnaissance — Gathers target information including subdomains, technology stack, and open ports
2. Vulnerability scanning — Tests for OWASP Top 10, business logic flaws, and configuration weaknesses
3. Exploitation verification — Generates safe proof-of-concept payloads to confirm vulnerabilities
4. Post-exploitation analysis — Assesses potential impact and lateral movement paths
5. Report generation — Produces a structured report with findings, evidence, and remediation priorities

Best For

• Scheduled security assessments of web applications
• Pre-launch security validation for new features
• Bug bounty reconnaissance and methodology assistance
• Compliance-driven penetration testing for PCI DSS or SOC 2

Important Safety Notes

This skill should ONLY be used against systems you own or have explicit written authorization to test. Use test/staging environments whenever possible. The skill will ask for confirmation before executing any active scanning or exploitation steps. All activities should be logged for audit purposes.