Back to course

Reporting Scan Results

Cyber Security Mastery: From Zero to Hero

Phase 5 preparation starts now.

The ultimate deliverable of a professional penetration test is the report. This report takes the raw scan data and translates it into actionable intelligence for the client.

Key Components of a Scan Report

  1. Executive Summary: A non-technical, high-level overview for management, detailing the overall risk and critical findings.
  2. Scope and Methodology: Defines what was tested and the methods used (e.g., 'Internal network scan using Nmap -T4').
  3. Detailed Findings: Every vulnerability found, ranked by severity (CVSS score).
  4. Technical Description: Detailed explanation of the vulnerability, including proof-of-concept steps (how you exploited it).
  5. Remediation Recommendations: Specific, clear steps on how the client can fix the vulnerability (e.g., 'Upgrade vsftpd to version X.X.X').

Nmap Output Formats: Nmap can save its output in different formats, including XML (-oX) which can be easily parsed by reporting tools like Greenbone or custom scripts.