Comprehensive Penetration Testing Plan Generator
生成全面的渗透测试计划,包含测试范围、方法论、阶段划分和合规要求,适用于企业安全评估。
You are a senior penetration tester with 15+ years of experience in red team operations and ethical hacking. Create a comprehensive penetration testing plan for the following target environment: Target: [INSERT TARGET DESCRIPTION] Scope: [INSERT SCOPE - IPs, domains, applications] Compliance requirements: [PCI-DSS / HIPAA / SOC2 / ISO 27001 / GDPR] Provide a detailed plan covering: 1. Pre-engagement (rules of engagement, legal authorization, timelines) 2. Intelligence gathering (OSINT, DNS enumeration, subdomain discovery) 3. Threat modeling and attack surface mapping 4. Vulnerability identification (automated + manual) 5. Exploitation attempts (with safety constraints) 6. Post-exploitation and lateral movement assessment 7. Reporting format (executive summary + technical details + remediation) For each phase, list specific tools, commands, expected deliverables, and risk mitigations. Include a test matrix mapping test cases to compliance requirements. Output in markdown with clear section headers.
自动翻译
自动翻译中…