implemented pentest report --> retest quote
This commit is contained in:
skyanth
@@ -0,0 +1,54 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<offerte xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
||||
xmlns:xi="http://www.w3.org/2001/XInclude"
|
||||
xmlns:xlink="http://www.w3.org/1999/xlink"
|
||||
xmlns:fo="http://www.w3.org/1999/XSL/Format"
|
||||
xsi:noNamespaceSchemaLocation="../dtd/offerte.xsd"
|
||||
xml:lang="en"><!--document meta information; to be filled in by the offerte writer-->
|
||||
<meta>
|
||||
<offered_service_long>penetration retesting services</offered_service_long>
|
||||
<!--if there is a shorter way of saying the same thing, you can type it here (it makes for more dynamic offerte text). If not, just repeat the long name.-->
|
||||
<offered_service_short>retest</offered_service_short>
|
||||
<xi:include href="snippets/company_info.xml"/>
|
||||
<targets><!--one target element per target-->
|
||||
<target>target1.sittingduck.com</target>
|
||||
<target>target2.sittingduck.com</target>
|
||||
<target>FishInABarral App</target>
|
||||
</targets>
|
||||
<permission_parties>
|
||||
<xi:include href="client_info.xml"/>
|
||||
</permission_parties>
|
||||
<pentestinfo>
|
||||
<duration>2</duration>
|
||||
<!--duration of pentest, in working days-->
|
||||
<test_planning>TBD</test_planning>
|
||||
<!--date or date range in text, e.g. May 18th until May 25th, 2015-->
|
||||
<report_due>TBD</report_due>
|
||||
<!--date or date range in text, e.g. May 18th until May 25th, 2015-->
|
||||
<nature>???</nature>
|
||||
<type>black-box</type>
|
||||
<!--please choose one of the following: black-box, grey-box, crystal-box-->
|
||||
<fee denomination="eur">2000</fee>
|
||||
<!--(eur|usd|gbp)-->
|
||||
</pentestinfo>
|
||||
<version_history><!--needed for date on frontpage and in signature boxes; it is possible to add a new <version> after each review; in that case, make sure to update the date/time-->
|
||||
<version number="auto" date="2016-09-14T10:00:00"><!--actual date-time here; you can leave the number attribute alone-->
|
||||
<v_author>ROS Writer</v_author>
|
||||
<!--name of the author here; for internal use only-->
|
||||
<v_description>Initial draft</v_description>
|
||||
<!--for internal use only-->
|
||||
</version>
|
||||
</version_history>
|
||||
</meta>
|
||||
<xi:include href="snippets/offerte/en/introandscope_retest.xml"/>
|
||||
<xi:include href="snippets/offerte/en/projectoverview_retest.xml"/>
|
||||
<xi:include href="snippets/offerte/en/prerequisites.xml"/>
|
||||
<xi:include href="snippets/offerte/en/disclaimer.xml"/>
|
||||
<xi:include href="snippets/offerte/en/methodology.xml"/>
|
||||
<xi:include href="snippets/offerte/en/teamandreporting.xml"/>
|
||||
<xi:include href="snippets/offerte/en/planningandpayment.xml"/>
|
||||
<xi:include href="snippets/offerte/en/aboutus.xml"/>
|
||||
<xi:include href="snippets/offerte/en/conditions.xml"/>
|
||||
<xi:include href="snippets/offerte/en/generaltermsandconditions.xml"/>
|
||||
<xi:include href="snippets/offerte/en/waiver.xml"/>
|
||||
</offerte>
|
||||
@@ -9,7 +9,7 @@
|
||||
<!-- THIS you can change/expand! -->
|
||||
<string id="coverpage_offer">
|
||||
<translation xml:lang="nl">OFFERTE</translation>
|
||||
<translation xml:lang="en">OFFER</translation>
|
||||
<translation xml:lang="en">QUOTE</translation>
|
||||
</string>
|
||||
<string id="coverpage_service_pentest">
|
||||
<translation xml:lang="nl">penetratietestdiensten</translation>
|
||||
@@ -19,6 +19,14 @@
|
||||
<translation xml:lang="nl">penetratietest</translation>
|
||||
<translation xml:lang="en">penetration test</translation>
|
||||
</string>
|
||||
<string id="coverpage_service_retest">
|
||||
<translation xml:lang="nl">penetratietestdiensten</translation>
|
||||
<translation xml:lang="en">penetration retesting services</translation>
|
||||
</string>
|
||||
<string id="coverpage_service_retest_short">
|
||||
<translation xml:lang="nl">hertest</translation>
|
||||
<translation xml:lang="en">retest</translation>
|
||||
</string>
|
||||
<string id="coverpage_service_basic-scan">
|
||||
<translation xml:lang="nl">basis-securityscandiensten</translation>
|
||||
<translation xml:lang="en">basic security scan services</translation>
|
||||
|
||||
@@ -0,0 +1,10 @@
|
||||
<section xmlns:xi="http://www.w3.org/2001/XInclude">
|
||||
<title>Introduction</title>
|
||||
<p><client_long/> (hereafter “<b><client_short/></b>”), with its registered office
|
||||
at <client_street/>, <client_city/>, <client_country/>, has requested <company_long/>
|
||||
(hereafter “<b><company_short/></b>”) to perform <company_svc_long/>.
|
||||
Motivation for this request is that <client_short/> recently had penetration test done by <company_short/> and wishes to test if the vulnerabilities have been mitigated.</p>
|
||||
|
||||
<p>This offer sets out the scope of the work and the terms and conditions under
|
||||
which <company_short/> will perform these services.</p>
|
||||
</section>
|
||||
@@ -0,0 +1,27 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<section>
|
||||
<title>Project Overview</title><!-- section with an overview of ROS activities -->
|
||||
<!-- snippet --><p><company_short/> will perform <company_svc_long/>
|
||||
for <client_short/> as a follow-up on the previous test in <b>XXXXXXXXXX TODO XXXXXXXXXX (timeframe of previous pentest)</b>. The services are intended to see if the previously discovered exploits are patched correctly. To do so, <company_short/> will access the systems again and test the findings from the previous penetration test (the “<b>Targets</b>”).</p>
|
||||
|
||||
|
||||
<!-- snippet --><p><company_short/> will test using both publicly available vulnerability scanning tools and manual testing. <company_short/> shall perform a <p_duration/>-day, <p_boxtype/> follow-up penetration test via the internet.</p>
|
||||
|
||||
<!-- snippet --> <!--Not Needed if Disclaimer is Included; Duplicate Text-->
|
||||
<!--p>It is possible that in the course of the penetration
|
||||
testing, <company_short/> might hinder the operations of the Targets or
|
||||
cause damage to the Targets. <client_short/> gives permission for this, to
|
||||
the extent that <company_short/> does not act negligently or
|
||||
recklessly. <client_short/> also warrants it has the authority to give such
|
||||
permission.</p-->
|
||||
|
||||
<!-- snippet --><!--Not Needed if Disclaimer is Included; Duplicate Text-->
|
||||
<!--p>It is important to understand the limits of
|
||||
<company_short/>'s services. <company_short/> does not (and cannot)
|
||||
give guarantees that something is secure. <company_short/> instead has
|
||||
an obligation to make reasonable efforts (in Dutch:
|
||||
“<i>inspanningsverplichting</i>”) to perform the agreed services.</p-->
|
||||
|
||||
<!--REMOVE commented-out text above if not including Disclaimer-->
|
||||
|
||||
</section>
|
||||
@@ -24,6 +24,22 @@
|
||||
<snippet>waiver</snippet>
|
||||
</snippet_group>
|
||||
</selection>
|
||||
|
||||
<selection subtype="retest">
|
||||
<snippet_group set="group1">
|
||||
<snippet>introandscope_retest</snippet>
|
||||
<snippet>projectoverview_retest</snippet>
|
||||
<snippet>prerequisites</snippet>
|
||||
<snippet>disclaimer</snippet>
|
||||
<snippet>methodology</snippet>
|
||||
<snippet>teamandreporting</snippet>
|
||||
<snippet>planningandpayment</snippet>
|
||||
<snippet>aboutus</snippet>
|
||||
<snippet>conditions</snippet>
|
||||
<snippet>generaltermsandconditions</snippet>
|
||||
<snippet>waiver</snippet>
|
||||
</snippet_group>
|
||||
</selection>
|
||||
|
||||
<selection subtype="basic-scan">
|
||||
<snippet_group set="group1">
|
||||
|
||||
Reference in New Issue
Block a user