Preparing a pentest report
When preparing a report, it ultimately comes down to personal preference and, possibly, if you are working for a larger company, corporate branding. Getting the theme, icons, logos, and brands out of the way, at the core, there is a fundamental structure that should be used as a guideline to build your report against. Now, depending on your educational background, talking about report structure might come across as redundant; however, it is critical to build a clear and concise report that can be easily ingested by your customer because if they can't follow the flow of the report, it might be the last engagement you have with that client.
Story time
I spent many years working with, and for, Engineering Procurement Construction (EPC) companies. During that time, I became very familiar with search and replace all word processor functions. Building a reusable set of reporting templates is vital to a successful pentesting career. With each engagement...
