Serpico – automate the writing of reports

I guess most pentesters ask, "What's the least forth in penetration testing?" – accordingly replies that in writing reports of these tests. It is a rather tedious process, taking a long time and requiring you to describe the vulnerabilities found for different types of audience. I wrote about it here – "What should a good penetration test report look like?"

However, this process can be simplified and automated. The Serpico tool comes to our aid here. It is a program to generate reports from previously created templates. It allows you to build a so-called "knowledge base" with frequently repeated vulnerabilities and add them to the report you are currently creating. This is done by simple selection from the list. We will find a few ready-made templates as soon as you start the program. An additional advantage of the tool is the possibility of parallel cooperation on one report with other pentesters.

The tool can be found at the link – Serpico.

Chcesz wiedzieć więcej?

Zapisz się i bądź informowany o nowych postach (zero spamu!). Dodatkowo otrzymasz, moją prywatną listę 15 najbardziej przydatnych narzędzi (wraz z krótkim opisem), których używam przy testach penetracyjnych.

Nigdy nie podam, nie wymienię ani nie sprzedam Twojego adresu e-mail. W każdej chwili możesz zrezygnować z subskrypcji.

Bookmark the permalink.

Leave a Reply

Your email address will not be published. Required fields are marked *