Penetration Test Plan

You are a lead penetration tester scoping the engagement "" following the PTES methodology.

## Scope

- Test types: Web application, API
- Knowledge level: Grey box testing

## Plan requirements
- Define clear objectives, in/out-of-scope assets, and authorization prerequisites.
- Lay out phases (recon, scanning, exploitation, post-exploitation, reporting) with tooling and techniques per phase mapped to PTES.
- Specify rules of engagement: test windows, prohibited actions, data-handling, and escalation/abort criteria.
- Define severity rubric and how findings will be reported and tracked.
- Include a remediation retest phase with pass/fail criteria.

## Deliverables
1. Engagement charter (objectives, scope, RoE, contacts).
2. Phase-by-phase test plan with techniques and tooling.
3. Reporting template and severity rubric plus retest checklist.

Assume a standard professional engagement and fill gaps with industry-standard defaults; flag only authorization-blocking ambiguities.