deleted test docs
This commit is contained in:
skyanth
@@ -1,79 +0,0 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<contract xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
||||
xmlns:xi="http://www.w3.org/2001/XInclude"
|
||||
xmlns:xlink="http://www.w3.org/1999/xlink"
|
||||
xsi:noNamespaceSchemaLocation="../dtd/contract.xsd"
|
||||
xml:lang="en">
|
||||
<meta>
|
||||
<xi:include href="snippets/company_info.xml"/>
|
||||
<scope>
|
||||
<contract_type>fixed_term</contract_type>
|
||||
<!-- single_engagement or fixed_term -->
|
||||
<engagement_description>battle the pirates</engagement_description>
|
||||
<!-- [NOTE: only needed for SINGLE ENGAGEMENT type contract, value is ignored otherwise] -->
|
||||
<secondpartyrole>Consultant</secondpartyrole>
|
||||
<!-- what contractor will be referred to throughout the contract. Can be anything, but should probably be Consultant or Consultancy company. When in doubt, leave as is. -->
|
||||
</scope>
|
||||
<contractor sex="M"><!-- (M|F|O) (O for other) --> <!-- this info is used to select the correct pronoun, not for profiling :) -->
|
||||
<name>Peter Pan</name>
|
||||
<ctcompany>Lost Boys Inc.</ctcompany>
|
||||
<!-- delete element in case of freelancer without company -->
|
||||
<address>Cloud 9</address>
|
||||
<postal_code>1234 XX</postal_code>
|
||||
<city>Treehouse City</city>
|
||||
<country>Neverland</country>
|
||||
<email>peter@pan.tech</email>
|
||||
<hourly_fee denomination="eur">50</hourly_fee>
|
||||
<!-- (eur|gbp|usd) -->
|
||||
</contractor>
|
||||
<work>
|
||||
<activities><!-- add/delete activity elements as necessary -->
|
||||
<activity>Taunting Captain Hook</activity>
|
||||
<activity>Feeding crocodiles</activity>
|
||||
<activity>Flying to and fro ('to' and 'fro' to be specified at takeoff)</activity>
|
||||
</activities>
|
||||
<start_date>2016-08-18</start_date>
|
||||
<end_date>2016-09-15</end_date>
|
||||
<planning><!-- amount of work to be done between the start and end date -->
|
||||
<hours>30</hours>
|
||||
<!-- non-negative integer, used for planned working hours over total engagement (for SINGLE ENGAGEMENT contract) or over each period in <per> (for FIXED TIME contract) -->
|
||||
<per>month</per>
|
||||
<!-- (month|week) [NOTE: only used for FIXED TIME contract, value is ignored otherwise] -->
|
||||
</planning>
|
||||
</work>
|
||||
</meta>
|
||||
<section>
|
||||
<title>security consulting agreement</title>
|
||||
<xi:include href="snippets/contract/en/parties.xml"/>
|
||||
<p>WHEREAS:</p>
|
||||
<ol type="A">
|
||||
<xi:include href="snippets/contract/en/wa_contractorcan.xml"/>
|
||||
<xi:include href="snippets/contract/en/wa_noemploymentintention.xml"/>
|
||||
</ol>
|
||||
<!--Agreement section-->
|
||||
<section>
|
||||
<title>agree as follows</title>
|
||||
<ol type="1">
|
||||
<xi:include href="snippets/contract/en/ag_period.xml"/>
|
||||
<xi:include href="snippets/contract/en/ag_noemployment.xml"/>
|
||||
<xi:include href="snippets/contract/en/ag_companyinstructs.xml"/>
|
||||
<xi:include href="snippets/contract/en/ag_ownrisk.xml"/>
|
||||
<xi:include href="snippets/contract/en/ag_workinghours.xml"/>
|
||||
<xi:include href="snippets/contract/en/ag_payment_fixed_term.xml"/>
|
||||
<xi:include href="snippets/contract/en/ag_biggerscopewarning.xml"/>
|
||||
<xi:include href="snippets/contract/en/ag_propertyrights.xml"/>
|
||||
<xi:include href="snippets/contract/en/ag_retainrights.xml"/>
|
||||
<xi:include href="snippets/contract/en/ag_nondisclosure.xml"/>
|
||||
<xi:include href="snippets/contract/en/ag_responsibilities.xml"/>
|
||||
<xi:include href="snippets/contract/en/ag_thirdparty.xml"/>
|
||||
<xi:include href="snippets/contract/en/ag_liability.xml"/>
|
||||
<xi:include href="snippets/contract/en/ag_provisions.xml"/>
|
||||
<xi:include href="snippets/contract/en/ag_generaltermsandconditions.xml"/>
|
||||
</ol>
|
||||
</section>
|
||||
<section>
|
||||
<title>Signed in duplicate on August 18, 2016 in</title>
|
||||
<generate_contract_signature_box/>
|
||||
</section>
|
||||
</section>
|
||||
</contract>
|
||||
@@ -1,20 +0,0 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<invoice xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
||||
xmlns:xi="http://www.w3.org/2001/XInclude"
|
||||
xmlns:xlink="http://www.w3.org/1999/xlink"
|
||||
xmlns:fo="http://www.w3.org/1999/XSL/Format"
|
||||
xsi:noNamespaceSchemaLocation="../dtd/invoice.xsd"
|
||||
date="2016-08-25"
|
||||
invoice_no="00/000"
|
||||
denomination="euro">
|
||||
<meta>
|
||||
<xi:include href="snippets/company_info.xml"/>
|
||||
<xi:include href="client_info.xml"/>
|
||||
</meta>
|
||||
<servicesdelivered>
|
||||
<service>
|
||||
<description>6-day penetration test Sitting Duck</description>
|
||||
<fee>100</fee>
|
||||
</service>
|
||||
</servicesdelivered>
|
||||
</invoice>
|
||||
@@ -1,73 +0,0 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<offerte xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
||||
xmlns:xi="http://www.w3.org/2001/XInclude"
|
||||
xmlns:xlink="http://www.w3.org/1999/xlink"
|
||||
xmlns:fo="http://www.w3.org/1999/XSL/Format"
|
||||
xsi:noNamespaceSchemaLocation="../dtd/offerte.xsd"
|
||||
xml:lang="en"><!--document meta information; to be filled in by the offerte writer-->
|
||||
<meta>
|
||||
<offered_service_long>penetration testing services</offered_service_long>
|
||||
<!--if there is a shorter way of saying the same thing, you can type it here (it makes for more dynamic offerte text). If not, just repeat the long name.-->
|
||||
<offered_service_short>penetration test</offered_service_short>
|
||||
<xi:include href="snippets/company_info.xml"/>
|
||||
<targets><!--one target element per target-->
|
||||
<target>dsfsd</target>
|
||||
<target>adfsd</target>
|
||||
</targets>
|
||||
<permission_parties>
|
||||
<xi:include href="client_info.xml"/>
|
||||
<party>
|
||||
<full_name>dafaf</full_name>
|
||||
<short_name>dad</short_name>
|
||||
<!-- Name of the person who will need to sign the waiver for this vendor -->
|
||||
<waiver_rep>sgf</waiver_rep>
|
||||
<address>fsgf</address>
|
||||
<city>sgf</city>
|
||||
<country>sfgsfg</country>
|
||||
</party>
|
||||
</permission_parties>
|
||||
<pentestinfo>
|
||||
<duration>6</duration>
|
||||
<!--duration of pentest, in working days-->
|
||||
<test_planning>TBD</test_planning>
|
||||
<!--date or date range in text, e.g. May 18th until May 25th, 2015-->
|
||||
<report_due>TBD</report_due>
|
||||
<!--date or date range in text, e.g. May 18th until May 25th, 2015-->
|
||||
<nature>time-boxed</nature>
|
||||
<type>crystal-box</type>
|
||||
<!--please choose one of the following: black-box, grey-box, crystal-box-->
|
||||
<fee denomination="euro">100</fee>
|
||||
<!--(euro|dollar)-->
|
||||
</pentestinfo>
|
||||
<version_history><!--needed for date on frontpage and in signature boxes; it is possible to add a new <version> after each review; in that case, make sure to update the date/time-->
|
||||
<version number="auto" date="2016-08-25T10:00:00"><!--actual date-time here; you can leave the number attribute alone-->
|
||||
<v_author>ROS Writer</v_author>
|
||||
<!--name of the author here; for internal use only-->
|
||||
<v_description>Initial draft</v_description>
|
||||
<!--for internal use only-->
|
||||
</version>
|
||||
</version_history>
|
||||
</meta>
|
||||
<!--Introduction and Scope-->
|
||||
<xi:include href="snippets/offerte/en/introandscope.xml"/>
|
||||
<!--Project overview section-->
|
||||
<xi:include href="snippets/offerte/en/projectoverview.xml"/>
|
||||
<!--Prerequisites section-->
|
||||
<xi:include href="snippets/offerte/en/prerequisites.xml"/>
|
||||
<!--Disclaimer section-->
|
||||
<xi:include href="snippets/offerte/en/disclaimer.xml"/>
|
||||
<!--Methodology section-->
|
||||
<xi:include href="snippets/offerte/en/methodology.xml"/>
|
||||
<xi:include href="snippets/offerte/en/codeauditmethodology.xml"/>
|
||||
<xi:include href="snippets/offerte/en/teamandreporting.xml"/>
|
||||
<!--Planning and payment section-->
|
||||
<xi:include href="snippets/offerte/en/planningandpayment.xml"/>
|
||||
<!--About Us section-->
|
||||
<xi:include href="snippets/offerte/en/aboutus.xml"/>
|
||||
<!--Work condition section-->
|
||||
<xi:include href="snippets/offerte/en/conditions.xml"/>
|
||||
<!--General terms and conditions section-->
|
||||
<xi:include href="snippets/offerte/en/generaltermsandconditions.xml"/>
|
||||
<!--Waivers-->
|
||||
<xi:include href="snippets/offerte/en/waiver.xml"/>
|
||||
</offerte>
|
||||
@@ -1,58 +0,0 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
|
||||
<quickscope xmlns:xi="http://www.w3.org/2001/XInclude"
|
||||
xmlns:xml="http://www.w3.org/XML/1998/namespace">
|
||||
<!-- Today's date -->
|
||||
<version date="2015-01-01"/>
|
||||
<!-- YYYY-MM-DD -->
|
||||
<!-- COMPANY INFO -->
|
||||
<xi:include href="client_info.xml"/>
|
||||
|
||||
<!-- SERVICE INFO -->
|
||||
<meta>
|
||||
<!-- Language the offer should be in (en|nl) -->
|
||||
<offer_language>en</offer_language>
|
||||
<!-- Offer type (pentest|basic-scan|load-test|other) -->
|
||||
<offer_type>pentest</offer_type>
|
||||
<!-- Required service -->
|
||||
<!-- Note: is only used when type is 'other', if offer_type is a specific type, service name will be taken from the localisation strings -->
|
||||
<requested_service>penetration testing services</requested_service>
|
||||
<!-- Which targets will need to be tested?
|
||||
(one <target> element for each piece of software/service/server address/location...), delete/add as necessary -->
|
||||
<targets>
|
||||
<target>dsfsd</target>
|
||||
<target>adfsd</target>
|
||||
</targets>
|
||||
</meta>
|
||||
<!-- Some information about any third parties involved with the software/service to be tested, if applicable.
|
||||
If not applicable, delete the whole <third_party> element. If more parties are needed, add <third_party> elements -->
|
||||
<third_party>
|
||||
<full_name>dafaf</full_name>
|
||||
<short_name>dad</short_name>
|
||||
<!-- Name of the person who will need to sign the waiver for this vendor -->
|
||||
<waiver_rep>sgf</waiver_rep>
|
||||
<address>fsgf</address>
|
||||
<city>sgf</city>
|
||||
<country>sfgsfg</country>
|
||||
</third_party>
|
||||
|
||||
<pentest_info>
|
||||
<!-- How long would you like the test to be? (in days) -->
|
||||
<days>6</days>
|
||||
<!-- Service execution (Use one of the following values: time-boxed, subscription) -->
|
||||
<nature>time-boxed</nature>
|
||||
<!-- Testing type (Use one of the following values: crystal-box, black-box, grey-box) -->
|
||||
<type>crystal-box</type>
|
||||
<!-- Test planning (when would you like the test to be executed -->
|
||||
<!-- Ideally something specific like 'December 7th - December 12th, 2015', but another description 'Beginning of December' is fine as well -->
|
||||
<!-- do not start with a capital letter -->
|
||||
<planning>TBD</planning>
|
||||
<!-- Pentest report delivery date (please allow at least 1 week between the end of the pentest and the report delivery date) -->
|
||||
<delivery>TBD</delivery>
|
||||
<!-- Do you need/want a code audit? (possible values: yes/no), only for pentest -->
|
||||
<codeaudit perform="yes"/>
|
||||
<!-- rate (to be filled in by ROS ;) -->
|
||||
<rate>100</rate>
|
||||
|
||||
</pentest_info>
|
||||
</quickscope>
|
||||
@@ -1,120 +0,0 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<pentest_report xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
||||
xmlns:xi="http://www.w3.org/2001/XInclude"
|
||||
xmlns:xlink="http://www.w3.org/1999/xlink"
|
||||
xmlns:fo="http://www.w3.org/1999/XSL/Format"
|
||||
xsi:noNamespaceSchemaLocation="../dtd/pentestreport.xsd"
|
||||
xml:lang="en"
|
||||
findingCode="XXX">
|
||||
<meta>
|
||||
<title>Penetration Test Report</title>
|
||||
<xi:include href="client_info.xml"/>
|
||||
<targets><!--one target element per target-->
|
||||
<target>dsfsd</target>
|
||||
<target>adfsd</target>
|
||||
</targets>
|
||||
<collaborators>
|
||||
<reviewers>
|
||||
<reviewer>FirstName LastName</reviewer>
|
||||
</reviewers>
|
||||
<approver>
|
||||
<name>Melanie Rieback</name>
|
||||
<bio>Melanie Rieback is a former Asst. Prof. of Computer Science from the
|
||||
VU, who is also the co-founder/CEO of Radically Open Security.</bio>
|
||||
</approver>
|
||||
<pentesters>
|
||||
<pentester>
|
||||
<name>FirstName LastName</name>
|
||||
<bio>Info</bio>
|
||||
</pentester>
|
||||
</pentesters>
|
||||
</collaborators>
|
||||
<classification>Confidential</classification>
|
||||
<version_history><!--needed for date on frontpage and in signature boxes; it is possible to add a new <version> after each review; in that case, make sure to update the date/time-->
|
||||
<version number="auto" date="2016-08-25T10:00:00"><!--actual date-time here; you can leave the number attribute alone-->
|
||||
<v_author>ROS Writer</v_author>
|
||||
<!--name of the author here; for internal use only-->
|
||||
<v_description>Initial draft</v_description>
|
||||
<!--for internal use only-->
|
||||
</version>
|
||||
</version_history>
|
||||
<xi:include href="snippets/company_info.xml"/>
|
||||
</meta>
|
||||
<generate_index/>
|
||||
<section id="executiveSummary">
|
||||
<title>Executive Summary</title>
|
||||
<section id="introduction">
|
||||
<title>Introduction</title>
|
||||
<p>...</p>
|
||||
<p>This report contains our findings as well as detailed explanations of exactly
|
||||
how ROS performed the penetration test.</p>
|
||||
</section>
|
||||
<section id="scope">
|
||||
<title>Scope of work</title>
|
||||
<p>The scope of the penetration test was limited to the following target:</p>
|
||||
<generate_targets/>
|
||||
</section>
|
||||
<section id="objectives">
|
||||
<title>Project objectives</title>
|
||||
<p>...</p>
|
||||
</section>
|
||||
<section id="timeline">
|
||||
<title>Timeline</title>
|
||||
<p>The Security Audit took place between X and Y, 2016.</p>
|
||||
</section>
|
||||
<xi:include href="resultsinanutshell.xml"/>
|
||||
<section id="findingSummary">
|
||||
<title>Summary of Findings</title>
|
||||
<generate_findings/>
|
||||
<!-- generated from Findings section -->
|
||||
</section>
|
||||
<section id="recommendationSummary">
|
||||
<title>Summary of Recommendations</title>
|
||||
<generate_recommendations/>
|
||||
<!-- generated from Findings section -->
|
||||
</section>
|
||||
</section>
|
||||
<xi:include href="snippets/report/methodology.xml"/>
|
||||
<section id="recon">
|
||||
<title>Reconnaissance and Fingerprinting</title>
|
||||
<p>Through automated scans we were able to gain the following information about the
|
||||
software and infrastructure. Detailed scan output can be found in the sections
|
||||
below.</p>
|
||||
<section id="scans">
|
||||
<title>Automated Scans</title>
|
||||
<p>As part of our active reconnaissance we used the following automated
|
||||
scans:</p>
|
||||
<ul><!--analyze_hosts - https://github.com/PeterMosmans/security-scripts-->
|
||||
<li>nmap – <a href="http://nmap.org">http://nmap.org</a>
|
||||
</li>
|
||||
<!--OWASP Zed Attack Proxy - https://github.com/zaproxy/zaproxy Skipfish – https://code.google.com/p/skipfish/ sqlmap – https://github.com/sqlmapproject/sqlmap testssl.sh –
|
||||
https://github.com/drwetter/testssl.sh-->
|
||||
</ul>
|
||||
</section>
|
||||
</section>
|
||||
<section id="techSummary">
|
||||
<title>Pentest Technical Summary</title>
|
||||
<section id="findings">
|
||||
<title>Findings</title>
|
||||
<p>We have identified the following issues:</p>
|
||||
<!-- Listing of Findings (written by pentesters) -->
|
||||
<!-- Extreme -->
|
||||
<!-- High -->
|
||||
<!-- Moderate -->
|
||||
<!-- Elevated -->
|
||||
<!-- Low -->
|
||||
</section>
|
||||
<section id="nonFindings">
|
||||
<title>Non-Findings</title>
|
||||
<p>In this section we list some of the things that were tried but turned out to
|
||||
be dead ends.</p>
|
||||
</section>
|
||||
<!-- Listing of Non-Findings (written by pentesters) -->
|
||||
</section>
|
||||
<xi:include href="futurework.xml"/>
|
||||
<xi:include href="conclusion.xml"/>
|
||||
<appendix id="testteam">
|
||||
<title>Testing team</title>
|
||||
<generate_testteam/>
|
||||
</appendix>
|
||||
</pentest_report>
|
||||
Reference in New Issue
Block a user