Pentest methodology checklist

A phase-by-phase attack lifecycle playbook for CTFs and OSCP-style labs. Commands are templates that insert your target IP and attacker values, so you can copy them straight into a terminal.

• Eight-phase attack lifecycle with checklist items per phase
• Service branches so the checklist adapts to what you find on a target
• Copyable commands with your target and attacker values interpolated
• Checklist progress tracked per machine
• Search across phases and commands
• Export the full playbook as Markdown for Obsidian or GitBook

Guides and references

• HTB and TryHackMe machine writeups and attack paths
• OSCP and CTF cheatsheets by topic
• Pentest methodology checklist by phase
• Reverse shell cheat sheet
• CPTS and OSCP study notes

Methodology phases

• Phase 01: Host Discovery & Surface Mapping
• Phase 02: Protocol & Service Enumeration
• Phase 03: Vulnerability Identification & Threat Modeling
• Phase 04: Foothold Execution & Initial Access
• Phase 05: Shell Stabilization & Context Triage
• Phase 06: Internal System & Network Reconnaissance
• Phase 07: Privilege Escalation & Lateral Movement
• Phase 08: Post-Exploitation, Flag Vault & Artifact Collection