Security Testing Wiki

Comprehensive checklists and methodologies for penetration testing engagements.


📂 Categories

Web Application Testing

OWASP-based methodology for web security assessments.

Mobile Application Testing

Android & iOS security testing checklists.

Internal Penetration Testing

Active Directory and internal network assessment.

External Penetration Testing

Perimeter and external infrastructure testing.

Cloud Security - Azure

Azure environment security assessment.

Configuration Audit

System hardening and compliance review.


Quick Reference

Phase Key Actions
Reconnaissance OSINT, DNS, Subdomain enum
Scanning Port scan, Service enum, Vuln scan
Exploitation Vulnerability exploitation, Access
Post-Exploitation Persistence, Lateral movement
Reporting Documentation, CVSS scoring

💡 Tip: Use Ctrl+F to quickly search within pages