Is there any enterprise or global standard like "OWASP" which can be followed while doing penetration testing on Linux servers?
I want to know if there are any most common/important vulnerabilities that must be covered while doing Linux server penetration testing?
OWASP has a top 10 vulnerability list that can be followed while doing Application vulnerability testing.

  • 1
    Automated scanners have all those "things to look for" built-in. Including patches and configuration issues.
    – schroeder
    Apr 3, 2019 at 8:50
  • actually I have enterprise licensed scanner (Nessus) by which I can get list of vulnerabilities of the targeted system. But I want to know the exact items for Penetration testing on a Linux server
    – Ashik
    Apr 3, 2019 at 9:36
  • 2
    I'm saying that the scanner has those items. Look at those lists as your guide.
    – schroeder
    Apr 3, 2019 at 9:44

1 Answer 1


There are actually multiple methodologies that you can use as a guideline to do penetration testing. For example, you have PTES, which is used by some commercial pentesters.

However, the PTES is more than "OWASP Top 10 but for Linux", as it defines communication with the customer, threat modeling, etc. as well.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .