133 lines
7.5 KiB
XML
133 lines
7.5 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
|
|
<!-- variable placeholders that can be used by the report writer throughout the offerte -->
|
|
<!-- NOTE: values are taken from <meta> section below! -->
|
|
|
|
<!-- CUSTOMER -->
|
|
|
|
<!-- <client_long/> long client name; value taken from /offerte/meta/client/full_name -->
|
|
<!-- <client_short/> short client name; value taken from /offerte/meta/client/short_name -->
|
|
<!-- <client_coc/> Chamber of Commerce number; value taken from /offerte/meta/client/coc -->
|
|
<!-- <client_street/> client street & number; value taken from /offerte/meta/client/address -->
|
|
<!-- <client_city/> client city; value taken from /offerte/meta/client/city -->
|
|
<!-- <client_country/> client country; value taken from /offerte/meta/client/country -->
|
|
<!-- <client_legal_rep/> client legal representative; value taken from /offerte/meta/client/legal_rep -->
|
|
<!-- <client_waiver_rep/> client legal representative; value taken from /offerte/meta/client/waiver_rep -->
|
|
<!-- <client_poc1/> first point of contact for client; value taken from /offerte/meta/client/poc1 -->
|
|
|
|
<!-- PROJECT -->
|
|
|
|
<!-- <p_duration/> number of days; value taken from /offerte/meta/activityinfo/duration -->
|
|
<!-- <p_boxtype/> pentest type; value taken from /offerte/meta/activityinfo/type -->
|
|
<!-- <p_fee/> fee value taken from /offerte/meta/activityinfo/fee -->
|
|
<!-- <p_testingduration/> value taken from /offerte/meta/activityinfo/test_planning -->
|
|
<!-- <p_reportwritingduration/> value taken from /offerte/meta/activityinfo/report_writing -->
|
|
<!-- <p_reportdue/> value taken from /offerte/meta/activityinfo/report_due -->
|
|
|
|
<!-- US -->
|
|
|
|
<!-- <company_long/> long company name; value taken from /offerte/meta/company/full_name -->
|
|
<!-- <company_short/> short company name; value taken from /offerte/meta/company/short_name -->
|
|
<!-- <company_legal_rep/> company legal representative; value taken from /offerte/meta/company/legal_rep -->
|
|
<!-- <company_poc1/> first point of contact for company; value taken from /offerte/meta/company/poc1 -->
|
|
<!-- <company_svc_long/> service offered in this offerte; value taken from /offerte/meta/offered_service_long -->
|
|
<!-- <company_svc_short/> service offered, shorter descr.; value taken from /offerte/meta/offered_service_short - NOTE: basically used to have more 'natural' language in snippets -->
|
|
|
|
<!-- APP -->
|
|
<!-- Is there an app to be tested? Put it here so included app snippets can use it -->
|
|
|
|
<!-- <t_app/> name of the app -->
|
|
<!-- <t_app_producer/> name of the company producing the app -->
|
|
|
|
<offerte xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
|
xsi:noNamespaceSchemaLocation="../dtd/offerte.xsd" xmlns:xi="http://www.w3.org/2001/XInclude" xmlns:xml="http://www.w3.org/XML/1998/namespace" xml:lang="nl">
|
|
|
|
<!-- document meta information; to be filled in by the offerte writer -->
|
|
|
|
<meta>
|
|
<offered_service_long>penetration testing services</offered_service_long>
|
|
<offered_service_short>penetration test</offered_service_short>
|
|
<xi:include href="snippets/company_info.xml"/>
|
|
<targets><!-- one target element per target -->
|
|
<target>...</target>
|
|
</targets>
|
|
<permission_parties>
|
|
<xi:include href="client_info.xml"/>
|
|
<!-- the party section is optional; if no other party needs to give permission, please remove whole party element -->
|
|
<party>
|
|
<full_name>...</full_name>
|
|
<short_name>...</short_name><!-- short party name; if no short name: same as long name -->
|
|
<waiver_rep>...</waiver_rep>
|
|
<address>...</address>
|
|
<city>...</city>
|
|
<country>...</country>
|
|
</party>
|
|
</permission_parties>
|
|
<activityinfo>
|
|
<duration>...</duration><!-- duration of pentest, in working DAYS -->
|
|
<test_planning>...</test_planning><!-- date or date range in text, e.g. May 18th until May 25th, 2015 -->
|
|
<report_writing>...</report_writing><!-- date or date range in text, e.g. May 18th until May 25th, 2015 -->
|
|
<report_due>...</report_due><!-- date or date range in text, e.g. May 18th until May 25th, 2015 -->
|
|
<nature>...</nature>
|
|
<type>...</type><!-- please choose one of the following: black-box, grey-box, crystal-box -->
|
|
<fee denomination="euro">...</fee><!-- euro|dollar -->
|
|
<target_application>...</target_application><!-- name of application to be tested (if any; if none, delete target_application element) -->
|
|
<target_application_producer>...</target_application_producer><!-- name of application to be tested (if any; if none, delete target_application_producer element) -->
|
|
</activityinfo>
|
|
<version_history><!-- needed for date on frontpage and in signature boxes; add a new <version> after each review and make sure to update the date/time -->
|
|
<version date="2015-06-08T10:00:00" number="auto"><!-- actual date-time here; you can leave the number attribute alone -->
|
|
<v_author>ROS Writer</v_author><!-- name of the author here -->
|
|
<v_description>Initial draft</v_description>
|
|
</version>
|
|
</version_history>
|
|
</meta>
|
|
|
|
|
|
<!-- section with some more info on the application (if any) -->
|
|
<section>
|
|
<title>The <t_app/>; Application</title>
|
|
<p><t_app/> is a ...</p>
|
|
<p>...</p>
|
|
</section>
|
|
|
|
<!-- section with some more info on the target infrastructure-->
|
|
<section>
|
|
<title>The <client_short/> Infrastructure</title>
|
|
<p>...</p>
|
|
</section>
|
|
|
|
<!-- Project overview section (complete section is in a snippet) -->
|
|
<xi:include href="snippets/offerte/nl/projectoverview.xml"/>
|
|
|
|
<section>
|
|
<title>Pentest Scope</title>
|
|
<p>...</p>
|
|
</section>
|
|
|
|
<!-- Prerequisites section (complete section is in a snippet) -->
|
|
<xi:include href="snippets/offerte/nl/prerequisites.xml"/>
|
|
|
|
<!-- Disclaimer section (complete section is in a snippet) -->
|
|
<xi:include href="snippets/offerte/nl/disclaimer.xml"/>
|
|
|
|
<!-- Pentest Methodology section (complete section is in a snippet) -->
|
|
<xi:include href="snippets/offerte/nl/methodology.xml"/>
|
|
<xi:include href="snippets/offerte/nl/methodology_basic-scan.xml"/>
|
|
|
|
<!-- Team and Reporting section (complete section is in a snippet) -->
|
|
<xi:include href="snippets/offerte/nl/teamandreporting.xml"/>
|
|
|
|
<!-- Planning and payment section (complete section is in a snippet) -->
|
|
<xi:include href="snippets/offerte/nl/planningandpayment.xml"/>
|
|
|
|
<!-- About ROS section (complete section is in a snippet) -->
|
|
<xi:include href="snippets/offerte/nl/aboutus.xml"/>
|
|
|
|
<!-- Work condition section (complete section is in a snippet) -->
|
|
<xi:include href="snippets/offerte/nl/conditions.xml"/>
|
|
|
|
<!-- General terms and conditions section (complete section is in a snippet) -->
|
|
<xi:include href="snippets/offerte/nl/generaltermsandconditions.xml"/>
|
|
<generate_waivers/>
|
|
</offerte>
|