PentestingChecklist
This site is the deep reference. PentestingChecklist is the hands-on, tick-as-you-go companion: a structured checklist across 23 platforms with progress tracking, notes, and export. Read the technique here, track it there.
Every major attack surface
Jump straight into the domain you are testing today.
Web Application Pentesting
Web security testing
API Pentesting
API security testing
Secure Code Review
Source Code security testing
Mobile Pentesting
Mobile security testing
Thick Client Pentesting
Desktop security testing
Cloud Pentesting
Cloud security testing
Network Pentesting
Network security testing
Firewall Penetration
Network security testing
Infrastructure Security
Infrastructure security testing
LLM Security Assessment
AI / LLM security testing
MCP Security Assessment
AI / LLM security testing
Active Directory Pentesting
Windows / AD security testing
Container & Kubernetes Assessment
Kubernetes security testing
IoT Pentesting
IoT security testing
Wi-Fi Pentesting
Wireless security testing
BlockChain Pentesting
Blockchain security testing
OSINT
OSINT security testing
Phishing Assessment
Social Eng. security testing
Configuration Review
Config security testing
DevSecOps
DevSecOps security testing
CI-CD Pentesting
CI/CD security testing
Threat Modeling
Design security testing
Forensic
Forensics security testing
Built for fast, focused reference
Instant local search
Fully static, offline-capable search with Ctrl/Cmd + K, fuzzy matching and in-page highlighting.
Reference library
100+ curated PDFs with clean download and open actions, cross-linked to written methodology.
Reading-first design
Reading progress, estimated time, comfortable typography, and dark/light themes.
Suggested learning paths
Structured routes through the material for common engagements.
Maintainer & Contributors
Built and maintained in the open by the security community.
m14r41
