Providing sufficient evidence
Include sufficient evidence to support your findings. This could be screenshots, logs, or any other information that will help management teams understand and validate the vulnerability. The more evidence you can provide, the better. In the following points, we will examine how to effectively present ample evidence:
- Screenshots and logs: Include screenshots to support your findings. These screenshots should clearly show the vulnerability in action. In addition, if possible, provide logs or any additional evidence to support the existence and impact of the vulnerability.
- Configuration information used: Detail the configuration used during your testing. This may include details about the test environment, application-specific configurations, or any settings that may influence the exploitation of the vulnerability.
- Input Data Used: If the vulnerability involves data manipulation, provide specific examples of input data that you have used to...
