Web Pentest — Live Web Application Testing Structured black-box / grey-box penetration testing of a live web application against an authorized target. Pairs with (which maps the surface) and complements (which reads the source). Use first; use this once you have a target list and credentials (or guest access). Authorization Check Before touching the target, confirm: 1. Written authorization for this specific application (pentest engagement, bug bounty in-scope domain, CTF/lab, your own asset) 2. The application is currently in scope and live (not deprecated, not under maintenance freeze) 3. T…