boilerplate text for objective/rian/futurework/conclusion
This commit is contained in:
@@ -1,4 +1,18 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<section id="conclusion" xml:base="conclusion.xml" break="before" inexecsummary="yes">
|
||||
<title>Conclusion</title>
|
||||
<p>We discovered <finding_count threatLevel="all"/>-severity issues during this penetration test.</p>
|
||||
|
||||
<p><todo desc="Add some paragraphs describing in high level the impact of these findings on the organization, priorities in fixing them"/></p>
|
||||
|
||||
<p>We recommend fixing all of the issues found and then performing a retest in order to ensure
|
||||
that mitigations are effective and that no new vulnerabilities have been introduced. </p>
|
||||
<p> Finally, we want to emphasize that security is a process – this penetration test is just a
|
||||
one-time snapshot. Security posture must be continuously evaluated and improved. Regular audits
|
||||
and ongoing improvements are essential in order to maintain control of your corporate
|
||||
information security. We hope that this pentest report (and the detailed explanations of our
|
||||
findings) will contribute meaningfully towards that end. </p>
|
||||
<p> Please don't hesitate to let us know if you have any further questions, or need further
|
||||
clarification on anything in this report. </p>
|
||||
|
||||
</section>
|
||||
|
||||
@@ -3,9 +3,17 @@
|
||||
<title>Future Work</title>
|
||||
<ul>
|
||||
<li>
|
||||
<b>Title</b>
|
||||
<br/>
|
||||
Description
|
||||
<b>Retest of findings</b>
|
||||
<br/> When mitigations for the vulnerabilities described in this report have been deployed, a
|
||||
repeat test should be performed to ensure that they are effective and have not introduced
|
||||
other security problems. </li>
|
||||
<li>
|
||||
<b>Regular security assessments</b>
|
||||
<br/> Security is an ongoing process and not a product, so we advise undertaking regular
|
||||
security assessments and penetration tests, ideally prior to every major release or every
|
||||
quarter. </li>
|
||||
<li>
|
||||
<todo desc="Add any specific future work for this project or remove this list item"/>
|
||||
</li>
|
||||
</ul>
|
||||
</section>
|
||||
|
||||
@@ -1,6 +1,9 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<section id="resultsinanutshell" xml:base="resultsinanutshell.xml">
|
||||
<title>Results In A Nutshell</title>
|
||||
<p>During this pentest we found <finding_count threatLevel="all"/> findings.</p>
|
||||
<p>...</p>
|
||||
<p>During this <todo desc="INSERT-SORT-OF-TEST"/> penetration test we found <finding_count threatLevel="all"/>-severity
|
||||
issues.</p>
|
||||
<p><todo desc="Describe what the findings relate to"/></p>
|
||||
|
||||
<p>By exploiting these issues, an attacker might be able to <todo desc="Loosely enumerate impact of findings"/>.</p>
|
||||
</section>
|
||||
|
||||
+11
-5
@@ -91,7 +91,8 @@
|
||||
</targets>
|
||||
<activityinfo>
|
||||
<xsl:for-each select="/offerte/meta/activityinfo/*">
|
||||
<xsl:if test="not(self::fee) and not(self::planning) and not(self::duration)">
|
||||
<xsl:if
|
||||
test="not(self::fee) and not(self::planning) and not(self::duration)">
|
||||
<xsl:copy copy-namespaces="no">
|
||||
<xsl:copy-of select="node()" copy-namespaces="no"/>
|
||||
</xsl:copy>
|
||||
@@ -172,7 +173,13 @@
|
||||
</section>
|
||||
<section id="objectives">
|
||||
<title>Project objectives</title>
|
||||
<p><todo/></p>
|
||||
<p>
|
||||
<company_short/> will perform a penetration test with <client_short/> of the
|
||||
<todo desc="INSERT-THE-SCOPE"/>. The test is intended to gain insight into the security of
|
||||
<todo desc="INSERT-THE-SCOPE"/>. To do so, <company_short/> will access this
|
||||
<todo desc="INSERT-THE-SCOPE"/>. and will guide <client_short/> in attempting to find
|
||||
vulnerabilities, and gain further access and elevated privileges by
|
||||
exploiting any vulnerabilities found.</p>
|
||||
</section>
|
||||
<section id="timeline">
|
||||
<title>Timeline</title>
|
||||
@@ -207,9 +214,8 @@
|
||||
|
||||
<section id="recon" inexecsummary="no">
|
||||
<title>Reconnaissance and Fingerprinting</title>
|
||||
<p>We were able to gain information about the
|
||||
software and infrastructure through automated scans. Detailed scan output can be found in the sections
|
||||
below.</p>
|
||||
<p>We were able to gain information about the software and infrastructure through
|
||||
automated scans. Detailed scan output can be found in the sections below.</p>
|
||||
|
||||
<section id="scans">
|
||||
<title>Automated Scans</title>
|
||||
|
||||
Reference in New Issue
Block a user