# Common Pentest Methodology

PTES-aligned penetration testing methodology for backend, frontend, and mobile.

- Repository: https://github.com/HoangNguyen0403/agent-skills-standard (582 stars)
- Category: Design
- License: MIT
- Last updated: 2026-11-01
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add HoangNguyen0403/agent-skills-standard --skill common-pentest-methodology -g -a claude-code -y`
Codex: `npx skills add HoangNguyen0403/agent-skills-standard --skill common-pentest-methodology -g -a codex -y`
Cursor: `npx skills add HoangNguyen0403/agent-skills-standard --skill common-pentest-methodology -g -a cursor -y`
Gemini CLI: `npx skills add HoangNguyen0403/agent-skills-standard --skill common-pentest-methodology -g -a gemini-cli -y`

## Description

PTES-aligned penetration testing methodology for backend, frontend, and mobile. Provides attack taxonomy, exploit techniques per vulnerability class, and platform-specific test matrices. Use when executing pentest workflow, planning security assessments, mapping attack surfaces, or building threat models.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# Penetration Testing Methodology (PTES-Aligned)

## **Priority: P0 (CRITICAL)**

## Always-Apply Rules

- **No Exploit = No Report**: Every finding requires reproducible Proof-of-Concept. Hypotheses without PoC are discarded.
- **No Production Testing**: All dynamic probes target local/staging only. Confirm authorization before Phase 1.
- **No Single-Platform Bias**: Assess backend, frontend, AND mobile surfaces when in-scope.

## Workflow

Load alongside `/pentest` workflow. Provides methodology backbone for all 7 phases.

1. **Scope** → Define test mode (whitebox/greybox/blackbox), platforms, exclusions.
2. **Recon** → Build asset inventory per platform. See [platform-recon](references/platform-recon.md).
3. **Threat Model** → Rank endpoints by risk. See [threat-modeling](references/threat-modeling.md).
4. **Analyze** → Run vulnerability matrix across all domains. Load `common-owasp`, `common-security-audit`, `common-dast-tooling`.
5. **Exploit** → Validate each finding with PoC. See [exploit-techniques](references/exploit-techniques.md).
6. **Post-Exploit** → Assess blast radius, lateral movement, privilege escalation.
7. **Report** → Audit-grade output with CVSS scoring. See [report-template](references/report-template.md) and [compliance-mapping](references/compliance-mapping.md).

## Platform Coverage Matrix

The rest: https://github.com/HoangNguyen0403/agent-skills-standard/blob/HEAD/.codex/skills/common/common-pentest-methodology/SKILL.md