Post

08 — Reporting

Reporting methodology — CVSS scoring reference, evidence capture workflow, finding documentation checklist, and report template links.

Posted
By Sam Ireton
1 min read
08 — Reporting

📁 Source: github.com/sireton/pentest-vault/08-Reporting
← Back to Methodology Index

#reporting #phase

Checklist

  • Executive Summary written (non-technical, business impact)
  • All findings documented with CVSS scores
  • Evidence captured (screenshots, command output)
  • Reproduction steps written
  • Remediation recommendations for every finding
  • Attack chain narrative written
  • Appendices: tools used, scope, methodology

CVSS Quick Reference

ScoreSeverity
9.0 – 10.0🔴 Critical
7.0 – 8.9🟠 High
4.0 – 6.9🟡 Medium
0.1 – 3.9🟢 Low
0.0ℹ️ Informational

Evidence Capture

1

{ date; whoami; hostname; id; } | tee evidence_$(date +%Y%m%d_%H%M%S).txt

Templates

  • [[Templates/HTB Walkthrough Template]]
  • [[Templates/Engagement Report Template]]
  • [[Templates/ProLab Report Template]]
  • [[Templates/Vulnerability Write-Up Template]]

Previous: Methodology Pillaging · Next: Methodology Tools

Tools & Methodologies, Methodology
Methodology Reporting CVSS Evidence Capture Pentest Report
This post is licensed under CC BY 4.0 by the author.