Report writing in 5 minutes. · Vlad Turcanu Eusebiu Boghici George Pitis Adrian Furtuna Advisors...
Transcript of Report writing in 5 minutes. · Vlad Turcanu Eusebiu Boghici George Pitis Adrian Furtuna Advisors...
![Page 1: Report writing in 5 minutes. · Vlad Turcanu Eusebiu Boghici George Pitis Adrian Furtuna Advisors Andrei Pitis Diana Olar Mihai Burduselu Andrei Damian . Thank you! 17 Adrian Furtunã](https://reader033.fdocuments.in/reader033/viewer/2022041808/5e55a9ffe5af6803212836bd/html5/thumbnails/1.jpg)
Adrian Furtunã
Founder & CEO
https://pentest-tools.com
Let's make pentesting fun again!
Report writing in 5 minutes.
Fab România
![Page 2: Report writing in 5 minutes. · Vlad Turcanu Eusebiu Boghici George Pitis Adrian Furtuna Advisors Andrei Pitis Diana Olar Mihai Burduselu Andrei Damian . Thank you! 17 Adrian Furtunã](https://reader033.fdocuments.in/reader033/viewer/2022041808/5e55a9ffe5af6803212836bd/html5/thumbnails/2.jpg)
Pentest reporting
2018 https://pentest-tools.com 2
![Page 3: Report writing in 5 minutes. · Vlad Turcanu Eusebiu Boghici George Pitis Adrian Furtuna Advisors Andrei Pitis Diana Olar Mihai Burduselu Andrei Damian . Thank you! 17 Adrian Furtunã](https://reader033.fdocuments.in/reader033/viewer/2022041808/5e55a9ffe5af6803212836bd/html5/thumbnails/3.jpg)
Pentest reporting
2018 https://pentest-tools.com 3
![Page 4: Report writing in 5 minutes. · Vlad Turcanu Eusebiu Boghici George Pitis Adrian Furtuna Advisors Andrei Pitis Diana Olar Mihai Burduselu Andrei Damian . Thank you! 17 Adrian Furtunã](https://reader033.fdocuments.in/reader033/viewer/2022041808/5e55a9ffe5af6803212836bd/html5/thumbnails/4.jpg)
Background info
2018 https://pentest-tools.com 4
![Page 5: Report writing in 5 minutes. · Vlad Turcanu Eusebiu Boghici George Pitis Adrian Furtuna Advisors Andrei Pitis Diana Olar Mihai Burduselu Andrei Damian . Thank you! 17 Adrian Furtunã](https://reader033.fdocuments.in/reader033/viewer/2022041808/5e55a9ffe5af6803212836bd/html5/thumbnails/5.jpg)
About me
2018 https://pentest-tools.com 5
# Ex-fulltime pentester
10+ years of experience in ethical hacking & IT security
Reformed programmer
# Founder of Pentest-Tools.com
# Associate professor @ MTA, UPB
# Speaker at security events and conferences:
Hack.lu - Luxembourg
Hacktivity – Budapest
ZeroNights - Moscow
Defcamp - Bucharest
OWASP Romania, etc
![Page 6: Report writing in 5 minutes. · Vlad Turcanu Eusebiu Boghici George Pitis Adrian Furtuna Advisors Andrei Pitis Diana Olar Mihai Burduselu Andrei Damian . Thank you! 17 Adrian Furtunã](https://reader033.fdocuments.in/reader033/viewer/2022041808/5e55a9ffe5af6803212836bd/html5/thumbnails/6.jpg)
Pentest-Tools.com
# We help companies become resilient against cyber attacks
Self-security assessment service
Periodic scans & notifications
Recommendation for fixing the issues
25+ essential tools
• Updated
• Configured
• Ready to run
2018 https://pentest-tools.com 6
20% Effort
80% Security Coverage
![Page 7: Report writing in 5 minutes. · Vlad Turcanu Eusebiu Boghici George Pitis Adrian Furtuna Advisors Andrei Pitis Diana Olar Mihai Burduselu Andrei Damian . Thank you! 17 Adrian Furtunã](https://reader033.fdocuments.in/reader033/viewer/2022041808/5e55a9ffe5af6803212836bd/html5/thumbnails/7.jpg)
Website activity
# 1,4 million users last year
# Organic growth
2018 https://pentest-tools.com 7
Audience Overview (Google Analytics) Company started
![Page 8: Report writing in 5 minutes. · Vlad Turcanu Eusebiu Boghici George Pitis Adrian Furtuna Advisors Andrei Pitis Diana Olar Mihai Burduselu Andrei Damian . Thank you! 17 Adrian Furtunã](https://reader033.fdocuments.in/reader033/viewer/2022041808/5e55a9ffe5af6803212836bd/html5/thumbnails/8.jpg)
Our customers
# > 3000 customers
# 120 countries
# 80% companies (SMEs)
# 20% individuals
2018 https://pentest-tools.com 8
![Page 9: Report writing in 5 minutes. · Vlad Turcanu Eusebiu Boghici George Pitis Adrian Furtuna Advisors Andrei Pitis Diana Olar Mihai Burduselu Andrei Damian . Thank you! 17 Adrian Furtunã](https://reader033.fdocuments.in/reader033/viewer/2022041808/5e55a9ffe5af6803212836bd/html5/thumbnails/9.jpg)
Back to pentest reporting
2018 https://pentest-tools.com 9
![Page 10: Report writing in 5 minutes. · Vlad Turcanu Eusebiu Boghici George Pitis Adrian Furtuna Advisors Andrei Pitis Diana Olar Mihai Burduselu Andrei Damian . Thank you! 17 Adrian Furtunã](https://reader033.fdocuments.in/reader033/viewer/2022041808/5e55a9ffe5af6803212836bd/html5/thumbnails/10.jpg)
Solution 1
# Copy-paste from previous reports
What was the latest good version?
Search for findings in multiple reports
Adapt to the current client (!)
2018 https://pentest-tools.com 10
![Page 11: Report writing in 5 minutes. · Vlad Turcanu Eusebiu Boghici George Pitis Adrian Furtuna Advisors Andrei Pitis Diana Olar Mihai Burduselu Andrei Damian . Thank you! 17 Adrian Furtunã](https://reader033.fdocuments.in/reader033/viewer/2022041808/5e55a9ffe5af6803212836bd/html5/thumbnails/11.jpg)
Solution 2
# Make your own report generator tool
Who makes it?
Who maintains it (bug fixing, new features, updated,
etc)?
Who keeps it updated and clean with the latest
findings?
2018 https://pentest-tools.com 11
![Page 12: Report writing in 5 minutes. · Vlad Turcanu Eusebiu Boghici George Pitis Adrian Furtuna Advisors Andrei Pitis Diana Olar Mihai Burduselu Andrei Damian . Thank you! 17 Adrian Furtunã](https://reader033.fdocuments.in/reader033/viewer/2022041808/5e55a9ffe5af6803212836bd/html5/thumbnails/12.jpg)
Solution 3
# Use a third-party report generation tool
Serpico:
• https://www.serpicoproject.com
• https://github.com/SerpicoProject/Serpico
VulnReport:
• http://vulnreport.io/
• https://github.com/salesforce/vulnreport
# Challenges:
Deployment & Initial configuration
Learning a new reporting tool
Importing scan results
2018 https://pentest-tools.com 12
![Page 13: Report writing in 5 minutes. · Vlad Turcanu Eusebiu Boghici George Pitis Adrian Furtuna Advisors Andrei Pitis Diana Olar Mihai Burduselu Andrei Damian . Thank you! 17 Adrian Furtunã](https://reader033.fdocuments.in/reader033/viewer/2022041808/5e55a9ffe5af6803212836bd/html5/thumbnails/13.jpg)
Our solution
# Cloud-based
# Scanning Tools => Results => Reporting (.docx)
2018 https://pentest-tools.com 13
![Page 14: Report writing in 5 minutes. · Vlad Turcanu Eusebiu Boghici George Pitis Adrian Furtuna Advisors Andrei Pitis Diana Olar Mihai Burduselu Andrei Damian . Thank you! 17 Adrian Furtunã](https://reader033.fdocuments.in/reader033/viewer/2022041808/5e55a9ffe5af6803212836bd/html5/thumbnails/14.jpg)
Pentest-Tools.com
# DEMO
2018 https://pentest-tools.com 14
![Page 15: Report writing in 5 minutes. · Vlad Turcanu Eusebiu Boghici George Pitis Adrian Furtuna Advisors Andrei Pitis Diana Olar Mihai Burduselu Andrei Damian . Thank you! 17 Adrian Furtunã](https://reader033.fdocuments.in/reader033/viewer/2022041808/5e55a9ffe5af6803212836bd/html5/thumbnails/15.jpg)
Vouchers - 300 Free Credits
# https://pentest-tools.com/register
Voucher code: DEFCAMP2018
Obtain 300 Free Credits into your new account
2018 https://pentest-tools.com 15
![Page 16: Report writing in 5 minutes. · Vlad Turcanu Eusebiu Boghici George Pitis Adrian Furtuna Advisors Andrei Pitis Diana Olar Mihai Burduselu Andrei Damian . Thank you! 17 Adrian Furtunã](https://reader033.fdocuments.in/reader033/viewer/2022041808/5e55a9ffe5af6803212836bd/html5/thumbnails/16.jpg)
Our team
2018 https://pentest-tools.com 16
Vlad Turcanu Eusebiu Boghici George Pitis Adrian Furtuna
Advisors
Andrei Pitis Diana Olar
Mihai Burduselu Andrei Damian
![Page 17: Report writing in 5 minutes. · Vlad Turcanu Eusebiu Boghici George Pitis Adrian Furtuna Advisors Andrei Pitis Diana Olar Mihai Burduselu Andrei Damian . Thank you! 17 Adrian Furtunã](https://reader033.fdocuments.in/reader033/viewer/2022041808/5e55a9ffe5af6803212836bd/html5/thumbnails/17.jpg)
Thank you!
17 https://pentest-tools.com
Adrian Furtunã
2018
Fab România