Now, let's take a look at some sample testing report, so I have taken this report from offensive security
dot com and you can visit reports less than one interesting report.
OK, so this way you can write a report there.
First of all, you have to mention executive summary.
OK, that is a summary of results.
Then we hope you mentioned a technology, right.
What kind of attacks you have used, what kind of tool or what kind of command you have used and what
kind of results you have got.
So you have to attach screenshot, right.
So here are a list of attacks and then you have to mention conclusion.
Right.
Any recommendations you want to give to your client or to your management, then define risk rating.
OK, so there is a proper system for risk rating that is Sievers's.
We will talk about it a bit more later.
But first of all, you have to mention, Vladimir, digital and mitigation.
OK, so let's see this report.
So after somebody see, as we have used this command and is look up, OK, so you have to take a screenshot
of this to explain it to the management that, hey, I have used this command and this lookup.
And what this command does is you have to explain in one or two lines, OK, and then what kind of result
you have got.
OK, so you have to mention complete details starting from using a command order, using a tool and
then how that works or what actually it does and the result you got.
OK.
And as a proof, you can get a screenshot or even you can record a video as well.
Right.
And you can also draw a diagram to explain management that what a situation would be.
OK, so this way you can explain management in very deep data, right?
OK, so this way you can create a basic penetration testing report.
Now let's talk about risk.
I told you about CBS, right?
So what?
It is so severe testing for common vulnerabilities scoring system, OK?
It provided your vulnerability a numerical number.
OK, starting from zero to 10.
If rescripting is 10, it means it is a very critical weakness.
You have to pay immediate attention to the absolute right.
So as you can see, CBS provides a way to capture the principal characteristics of a vulnerability and
produce a numerical score reflecting its 70.
Right.
So it goes from zero to 10.
OK, now I hope you know how you can create a simple penetration testing report.
OK, you can visit this report by visiting this.
You are OK.
So this is simple penetration testing report, which you have to make once you've done your testing
right.
And after that you have to provide risk rating to each output.
OK, suppose you have got three different kind of weaknesses in your client network, right?
So you have to define that, which is OK to live for now and which one we have to focus right now.
OK, so it depends on 021 Rescripting.
OK, so zero Butan actually zero to 10.
So it defines by zero to 10 as a vulnerability risk ratings.
So here are your quizzes scores.
OK, so if it was zero, which means none and point one, two, three, dot nine, which means the vulnerability
risk rating is low.
OK, and if about four to six dot nine it is medium and then seven to nine it is high and then about
nine it is very critical.
Right.
So this way, by using this table, you can define your risk rating in reports.
Right.