Grey Box Web & Server Security Penetration Testing Checklist

Pre-Engagement Activities

Information Gathering

Authentication Testing

Authorization Testing

Input Validation and Injection Testing

Business Logic Testing

Configuration and Deployment Testing

Post-Exploitation and Reporting

Follow-Up Activities

Related Checklists