I <3 Reporting

Nobody really loves reporting, but with a few tips and tricks the sting can be lessened somewhat. This repository provides (will provide?! PRs welcome) guidance for all aspects of reporting, the most unloved and important part of a penetration test.

These tips have been gleaned from years of report writing and fellow travellers of the hellish road. I've tried to give credit where credit is due, but if I've missed something, please let me know so I can correct.

Sections

• Data - A collection of resources to flesh out your findings.
• Style and Grammar - Pandora's box hath been opened.
• Tool Tips - Tips pertaining to common tools.
• Tools - Data management and reporting tools & libraries.
• Word Tips - Tame the strange beast that is Word.

General Resources

• Hack for Show, Report for Dough - The video bible of #reporting.
• How to Write Like It's Your Job - An excellent presentation on technical writing by the person who brought you the CyberSecurity Style Guide.
• Juliocesarfort's Collection of Public Reports