language:

• en
  license: apache-2.0
  pretty_name: Pentest Checklist (English)
  size_categories:
• 1K<n<10K
  task_categories:
• question-answering
• text-classification
  tags:
• cybersecurity
• ayinedjimi-consultants
• en
• pentest
• penetration-testing
• red-team
  authors:
• name: Ayi NEDJIMI
  url: https://ayinedjimi-consultants.fr/bio.html
  configs:
• config_name: default
  data_files:
  • split: train
    path: data/train-*
    source_datasets:
• original
  dataset_info:
  dataset_size: null
  download_size: null

Pentest Checklist - Bilingual Dataset

🎯 Overview

A comprehensive and bilingual (French/English) dataset for penetration testing methodology. Designed for security professionals, cybersecurity learners, and red teams.

Contains:

• 60 checklist items covering all pentest phases
• 60 essential penetration testing tools
• 50 French Q&A pairs
• 50 English Q&A pairs

📊 Dataset Content

Checklists (60 items)

Covered Phases:

1. Reconnaissance (12 items)

   • DNS Enumeration
   • OSINT Research
   • Subdomain Enumeration
   • Web Technology Identification
   • Data Breach Research
   • And more...

2. Scanning (10 items)

   • Nmap Port Scanning
   • Vulnerability Scanning
   • Web Application Scanning
   • Protocol Analysis
   • Certificate Scanning

3. Enumeration (10 items)

   • User Enumeration
   • Group Enumeration
   • SMB/LDAP Share Enumeration
   • Web Directory Enumeration
   • Database Enumeration

4. Exploitation (13 items)

   • SQL Injection (SQLi)
   • Cross-Site Scripting (XSS)
   • Cross-Site Request Forgery (CSRF)
   • Weak Authentication
   • Password Cracking
   • Directory Traversal
   • Remote Code Execution (RCE)
   • And more...

5. Post-Exploitation (10 items)

   • Persistence Mechanisms
   • Credential Dumping
   • Lateral Movement
   • Active Directory Privilege Escalation
   • Sensitive Resource Enumeration
   • Data Exfiltration
   • Antivirus/EDR Bypass

6. Reporting (5 items)

   • Vulnerability Rating
   • Evidence Generation
   • Results Documentation
   • Remediation Recommendations
   • Action Plan

Tools (60 tools)

Organized by category:

Reconnaissance:

• Nmap, Shodan, TheHarvester, Fierce, Subfinder, Amass, Wappalyzer, Maltego, SpiderFoot, DNSRecon

Scanning:

• Nessus, OpenVAS, Qualys, Nikto, Burp Suite, OWASP ZAP, Acunetix, Wireshark, Aircrack-ng, Masscan

Enumeration:

• Enum4linux, SMBMap, Gobuster, FFUF, Wfuzz, LDAPsearch, RPCClient, Impacket, BloodHound, Windapsearch

Exploitation:

• Metasploit, SQLMap, XSSer, Hashcat, John, Hydra, Medusa, Mimikatz, MSFVenom, Searchsploit

Post-Exploitation:

• Cobalt Strike, Empire, LaZagne, Responder, NTLMRelayx, LinPEAS, WinPEAS, Proxychains, Snaffler, Rubeus

Utilities:

• Curl, Git, Docker, Vagrant, Tmux, Vim, Ansible, Terraform, Python 3, Bash

Question & Answers

50 Q&A in French (QA-FR-001 to QA-FR-050)

Topics covered:

• General pentest concepts
• Reconnaissance and OSINT
• Scanning and enumeration
• Web exploitation
• Post-exploitation
• Reporting and certifications
• Ethics and compliance

50 Q&A in English (QA-EN-001 to QA-EN-050)

Same categories in English

🔍 Data Schema

Checklists

{
  "id": "PT-001",
  "phase": "reconnaissance",
  "name_fr": "Énumération DNS",
  "name_en": "DNS Enumeration",
  "description_fr": "...",
  "description_en": "...",
  "tools": ["dig", "nslookup", "fierce"],
  "commands": ["dig axfr @ns1.target.com target.com"],
  "target_type": "network",
  "difficulty": "beginner",
  "owasp_mapping": "",
  "mitre_mapping": "T1596",
  "source_url": "https://www.ayinedjimi-consultants.fr"
}

Tools

{
  "id": "TOOL-001",
  "name": "Nmap",
  "description_fr": "...",
  "description_en": "...",
  "category": "scanning",
  "url": "https://nmap.org",
  "platforms": ["Linux", "Windows", "macOS"],
  "phase": ["reconnaissance", "scanning"],
  "source_url": "https://www.ayinedjimi-consultants.fr"
}

Q&A

{
  "id": "QA-EN-001",
  "question": "What is a penetration test?",
  "answer": "...",
  "category": "general",
  "difficulty": "beginner",
  "source_url": "https://www.ayinedjimi-consultants.fr"
}

🏷️ Filters and Metadata

By Phase

• reconnaissance
• scanning
• enumeration
• exploitation
• post_exploitation
• reporting

By Target Type

• network
• web
• active_directory
• cloud
• wireless
• mobile

By Difficulty

• beginner
• intermediate
• advanced

Mappings

• OWASP Top 10: A01:2021 to A10:2021
• MITRE ATT&CK: T1596, T1589, T1046, T1190, T1548, etc.

💾 File Formats

• JSON: checklists.json, tools.json, qa_dataset.json, pentest_checklist_complete.json
• Parquet: checklists.parquet, tools.parquet, qa_dataset.parquet
• HuggingFace Datasets: Compatible format

📦 Installation

Via HuggingFace Datasets

from datasets import load_dataset

# Checklists in French
checklist_fr = load_dataset("AYI-NEDJIMI/pentest-checklist-fr", split="checklists")

# Checklists in English
checklist_en = load_dataset("AYI-NEDJIMI/pentest-checklist-en", split="checklists")

# Tools
tools_en = load_dataset("AYI-NEDJIMI/pentest-checklist-en", split="tools")

# Q&A
qa_en = load_dataset("AYI-NEDJIMI/pentest-checklist-en", split="qa")

From JSON

import json

with open('checklists.json', 'r') as f:
    checklists = json.load(f)

From Parquet

import pandas as pd

df = pd.read_parquet('checklists.parquet')

🔬 Use Cases

1. Pentest Training - Use checklist for learning
2. Pentest Planning - Reference for phases and techniques
3. Tool Benchmarking - Tool comparison and selection
4. Red Team Operations - Advanced attack techniques guide
5. Security Documentation - Knowledge base
6. AI Model Fine-tuning - Data for cybersecurity LLMs

📈 Statistics

🏆 Methodology Coverage

✅ NIST Cybersecurity Framework
✅ OWASP Testing Guide
✅ PTES (Penetration Testing Execution Standard)
✅ MITRE ATT&CK Framework
✅ CIS Benchmarks

📚 Related Dataset Collection

👨‍💼 About the Author

AYI-NEDJIMI Consultants

• 🌐 Website: www.ayinedjimi-consultants.fr
• 📧 Email: [email protected]
• 🔐 Specialties:
  • Penetration Testing
  • Red Team Operations
  • Security Assessment
  • Ethical Hacking Training

Related Resources

• Security Blog
• Pentest Services
• Cybersecurity Training
• OSCP/CEH Certifications

📋 License

Creative Commons Attribution 4.0 International (CC BY 4.0)

You are free to:

• Share and adapt the dataset
• Provided you give credit to AYI-NEDJIMI Consultants

🤝 Contributing

Contributions, corrections, and improvements are welcome!

🏷️ SEO Keywords

pentest penetration-testing cybersecurity ethical-hacking red-team OSCP CEH bug-bounty offensive-security web-security network-security vulnerability-assessment security-testing hacking-tools security-methodology attack-framework defensive-security incident-response security-audit compliance-testing

📞 Support

For questions or bug reports:

1. Open an issue on the HuggingFace repository
2. Contact directly: [email protected]
3. Check documentation: https://www.ayinedjimi-consultants.fr/docs

⚠️ Disclaimer

This dataset is provided for educational and informational purposes. It is intended for authorized security professionals only. Use for unauthorized activities is illegal. Users are responsible for compliance with applicable laws and regulations.

Last Updated: 2025 | Version: 1.0.0

Thank you for using the Pentest Checklist Dataset! 🙏

Author

Ayi NEDJIMI - Cybersecurity Consultant & Trainer | AI Expert

• Professional Bio
• All Articles
• Free Guides & Whitepapers
• Training Programs

Related Articles

• Top 5 Outils Pentest AD
• Kubernetes Offensif
• Escalades AWS
• Livre Blanc Pentest Cloud

Free Cybersecurity Resources

• Livre Blanc NIS 2
• Livre Blanc Sécurité Active Directory
• Livre Blanc Pentest Cloud AWS/Azure/GCP
• Livre Blanc Sécurité Kubernetes
• Livre Blanc IA Cyberdéfense
• Livre Blanc Anatomie Ransomware
• Guide Sécurisation AD 2025
• Guide Tiering Model AD

Part of the Collection

This dataset is part of the Cybersecurity Datasets & Tools Collection by AYI-NEDJIMI Consultants.