boilerplate text for objective/rian/futurework/conclusion

This commit is contained in:
skyanth
2020-03-26 10:19:35 +01:00
parent 5f5b56d8f1
commit 66b690dd8c
4 changed files with 41 additions and 10 deletions
+14
View File
@@ -1,4 +1,18 @@
<?xml version="1.0" encoding="UTF-8"?>
<section id="conclusion" xml:base="conclusion.xml" break="before" inexecsummary="yes">
<title>Conclusion</title>
<p>We discovered <finding_count threatLevel="all"/>-severity issues during this penetration test.</p>
<p><todo desc="Add some paragraphs describing in high level the impact of these findings on the organization, priorities in fixing them"/></p>
<p>We recommend fixing all of the issues found and then performing a retest in order to ensure
that mitigations are effective and that no new vulnerabilities have been introduced. </p>
<p> Finally, we want to emphasize that security is a process this penetration test is just a
one-time snapshot. Security posture must be continuously evaluated and improved. Regular audits
and ongoing improvements are essential in order to maintain control of your corporate
information security. We hope that this pentest report (and the detailed explanations of our
findings) will contribute meaningfully towards that end. </p>
<p> Please don't hesitate to let us know if you have any further questions, or need further
clarification on anything in this report. </p>
</section>
+11 -3
View File
@@ -3,9 +3,17 @@
<title>Future Work</title>
<ul>
<li>
<b>Title</b>
<br/>
Description
<b>Retest of findings</b>
<br/> When mitigations for the vulnerabilities described in this report have been deployed, a
repeat test should be performed to ensure that they are effective and have not introduced
other security problems. </li>
<li>
<b>Regular security assessments</b>
<br/> Security is an ongoing process and not a product, so we advise undertaking regular
security assessments and penetration tests, ideally prior to every major release or every
quarter. </li>
<li>
<todo desc="Add any specific future work for this project or remove this list item"/>
</li>
</ul>
</section>
+5 -2
View File
@@ -1,6 +1,9 @@
<?xml version="1.0" encoding="UTF-8"?>
<section id="resultsinanutshell" xml:base="resultsinanutshell.xml">
<title>Results In A Nutshell</title>
<p>During this pentest we found <finding_count threatLevel="all"/> findings.</p>
<p>...</p>
<p>During this <todo desc="INSERT-SORT-OF-TEST"/> penetration test we found <finding_count threatLevel="all"/>-severity
issues.</p>
<p><todo desc="Describe what the findings relate to"/></p>
<p>By exploiting these issues, an attacker might be able to <todo desc="Loosely enumerate impact of findings"/>.</p>
</section>
+11 -5
View File
@@ -91,7 +91,8 @@
</targets>
<activityinfo>
<xsl:for-each select="/offerte/meta/activityinfo/*">
<xsl:if test="not(self::fee) and not(self::planning) and not(self::duration)">
<xsl:if
test="not(self::fee) and not(self::planning) and not(self::duration)">
<xsl:copy copy-namespaces="no">
<xsl:copy-of select="node()" copy-namespaces="no"/>
</xsl:copy>
@@ -172,7 +173,13 @@
</section>
<section id="objectives">
<title>Project objectives</title>
<p><todo/></p>
<p>
<company_short/> will perform a penetration test with <client_short/> of the
<todo desc="INSERT-THE-SCOPE"/>. The test is intended to gain insight into the security of
<todo desc="INSERT-THE-SCOPE"/>. To do so, <company_short/> will access this
<todo desc="INSERT-THE-SCOPE"/>. and will guide <client_short/> in attempting to find
vulnerabilities, and gain further access and elevated privileges by
exploiting any vulnerabilities found.</p>
</section>
<section id="timeline">
<title>Timeline</title>
@@ -207,9 +214,8 @@
<section id="recon" inexecsummary="no">
<title>Reconnaissance and Fingerprinting</title>
<p>We were able to gain information about the
software and infrastructure through automated scans. Detailed scan output can be found in the sections
below.</p>
<p>We were able to gain information about the software and infrastructure through
automated scans. Detailed scan output can be found in the sections below.</p>
<section id="scans">
<title>Automated Scans</title>