{% comment %} cover page {% endcomment %}

{{ report_name }}

{{ scan_object.domain.name }}
{% now "F j, Y" %}
{{ company_name }} | {{ company_address }} | {{ company_email }} | {{ company_website }} {% if show_rengine_banner %}
Generated by reNgine
https://github.com/yogeshojha/rengine
{% endif %}
{% comment %} table of contents {% endcomment %}

Table of Contents

{% if show_executive_summary %}
Executive Summary
{% endif %}
Quick Summary
Assessment Timeline
Summary of Findings
{% if show_recon %}
Reconnaissance Findings
{% endif %} {% if show_vuln %}
Vulnerabilities Discovered
{% endif %}
{% if show_executive_summary %}

Executive Summary


{{ executive_summary_description | safe }}
{% endif %}

Quick Summary

This section contains quick summary of scan performed on {{ scan_object.domain.name }}


{% if show_recon %}

Reconnaissance

Subdomains

{{ scan_object.get_subdomain_count }}

Endpoints

{{ scan_object.get_endpoint_count }}

Vulnerabilities

{{ all_vulnerabilities_count }}
{% endif %} {% if show_vuln %}

Vulnerability Summary

Critical

{{ scan_object.get_critical_vulnerability_count }}

High

{{ scan_object.get_high_vulnerability_count }}

Medium

{{ scan_object.get_medium_vulnerability_count }}

Low

{{ scan_object.get_low_vulnerability_count }}

Info

{% if is_ignore_info_vuln %} 0 {% else %} {{ scan_object.get_info_vulnerability_count }} {% endif %}

Unknown

{{ scan_object.get_unknown_vulnerability_count }}
{% endif %}


Assessment Timeline

Scan started on: {{ scan_object.start_scan_date|date:"F j, Y h:i" }}
Total time taken: {% if scan_object.scan_status == 0 %} {{ scan_object.start_scan_date|timesince:scan_object.stop_scan_date }} {% elif scan_object.scan_status == 1 %} {{ scan_object.get_elapsed_time }} {% elif scan_object.scan_status == 2 %} {% if scan_object.get_completed_time_in_sec < 60 %} Completed in < 1 minutes {% else %} Completed in {{ scan_object.start_scan_date|timesince:scan_object.stop_scan_date }} {% endif %} {% elif scan_object.scan_status == 3 %} Aborted in {{ scan_object.start_scan_date|timesince:scan_object.stop_scan_date }} {% endif %}
Report Generated on: {% now "F j, Y" %}

Summary of Findings

This section provides a summary of the findings.

Subdomains Breakdown by HTTP Status

{% if show_vuln and unique_vulnerabilities %}

Vulnerabilities Breakdown by Severity

{% endif %}

Interesting Subdomains

{% if interesting_subdomains %}

Listed below are the interesting subdomains identified on {{ scan_object.domain.name }}

{% for subdomain in interesting_subdomains %} {% endfor %}
# Subdomain Page Title HTTP Status
{{ forloop.counter }} {{ subdomain.name }} {% if subdomain.page_title %}{{ subdomain.page_title }}{% endif %} {% if subdomain.http_status %}{{ subdomain.http_status }}{% endif %}
{% else %}

No interesting subdomains were identified on {{ scan_object.domain.name }}

{% endif %}
{% if show_vuln %}

Summary of Vulnerabilities Identified

{% if all_vulnerabilities.count == 0 %}

No vulnerabilities were identified on {{ scan_object.domain.name }}

{% else %}

Listed below are the vulnerabilities identified on {{ scan_object.domain.name }}

{% for vulnerability in unique_vulnerabilities %} {% endfor %}
# Vulnerability Name Instances Severity
{{ forloop.counter }} {{ vulnerability.name }} {{ vulnerability.count }} {% if vulnerability.severity == -1 %} Unknown {% elif vulnerability.severity == 0 %} Informational {% elif vulnerability.severity == 1 %} Low {% elif vulnerability.severity == 2 %} Medium {% elif vulnerability.severity == 3 %} High {% elif vulnerability.severity == 4 %} Critical {% endif %}
{% endif %} {% endif %} {% if show_recon %}

Discovered Assets

This section provides a list of assets discovered during the reconnaissance phase.

Subdomains

During the reconnaissance phase, our subdomain enumeration process revealed:

  1. Total Subdomains: {{ scan_object.get_subdomain_count }}
    • This extensive list provides a comprehensive view of the target's online footprint.
  2. Active Subdomains: {{ subdomain_alive_count }}
    • These subdomains returned an HTTP status 200 (OK), indicating live web assets.
  3. Interesting Subdomains: {{ interesting_subdomains.count }}
    • High-priority subdomains identified through keyword analysis (e.g., admin, api, test), suggesting a focused investigation.

{{ scan_object.get_subdomain_count }} subdomains identified on {{ scan_object.domain.name }}

{% comment %} if show vuln is there we may also show total vulnerbaility count {% endcomment %} {% if show_vuln %}{% endif %} {% for subdomain in subdomains %} {% if show_vuln %} {% endif %} {% endfor %}
# Subdomain Page Title HTTP StatusVulnerabilities Count
{{ forloop.counter }} {{ subdomain.name }} {% if subdomain.page_title %}{{ subdomain.page_title }}{% endif %} {% if subdomain.http_status %}{{ subdomain.http_status }}{% endif %} {% if subdomain.get_total_vulnerability_count %} {{ subdomain.get_total_vulnerability_count }} {% else %} 0 {% endif %}
{% if ip_addresses.count > 0 %}

IP Assets

In addition to subdomains, various IP assets associated with the target infrastructure were also identified:

  1. Total IP Addresses: {{ ip_addresses.count }}
    • This represents the range of unique IP addresses associated with the discovered subdomains and other network assets.
{% for ip in ip_addresses %} {% endfor %}
# IP Open Ports Geo Location Remarks
{{ forloop.counter }} {{ ip.address }} {% for port in ip.ports.all %} {{ port.number }}/{{ port.service_name }} {% if not forloop.last %},{% endif %} {% endfor %} {% if ip.geo_iso %}{{ ip.geo_iso }}{% endif %} {% if ip.is_cdn %}CDN{% endif %}
{% endif %}
{% endif %} {% if show_recon %}

Reconnaissance Findings

This section contains list of all the subdomains identified during the reconnaissance phase.

{% for subdomain in subdomains %}
{{ subdomain.name }} {% if subdomain.http_status %} {{ subdomain.http_status }} {% endif %}
{% if subdomain.page_title %}
{{ subdomain.page_title }}
{% endif %} {% if subdomain.ip_addresses.all %}

IP Addresses:

    {% for ip in subdomain.ip_addresses.all %}
  • {{ ip.address }} {% if ip.ports.all %}
      {% for port in ip.ports.all %}
    • {{ port.number }}/{{ port.service_name }}
      • {% endfor %}
    {% endif %}
    • {% endfor %}
{% endif %} {% if show_vuln %} {% if subdomain.get_vulnerabilities_without_info %}

Vulnerabilities:

{% regroup subdomain.get_vulnerabilities_without_info by name as vuln_list %}
{% endif %} {% endif %}
{% endfor %}
{% endif %} {% if show_vuln %}

Vulnerabilities Discovered

This section details the security vulnerabilities identified during our penetration testing engagement. Each finding is documented with its description, potential impact, and recommended remediation steps.
Vulnerabilities are categorized by severity (Critical, High, Medium, Low, Info) to prioritize remediation efforts. This assessment is based on the potential impact to confidentiality, integrity, and availability of the systems and data.
The information presented here is crucial for understanding your current security posture and should guide your remediation strategy to enhance overall security.


{% regroup all_vulnerabilities by get_path as grouped_vulnerabilities %} {% for vulnerabilities in grouped_vulnerabilities %} {% for vulnerability in vulnerabilities.list %}

{{ vulnerability.name }} {% if vulnerabilities.grouper %}
in {{ vulnerabilities.grouper }} {% endif %}

{% if vulnerability.severity == -1 %} Unknown {% elif vulnerability.severity == 0 %} INFO {% elif vulnerability.severity == 1 %} LOW {% elif vulnerability.severity == 2 %} MEDIUM {% elif vulnerability.severity == 3 %} HIGH {% elif vulnerability.severity == 4 %} CRITICAL {% endif %}
{{vulnerability.source|upper}} {% if vulnerability.cvss_score %} CVSS: {{vulnerability.cvss_score|upper}} {% endif %} {% if vulnerability.cve_ids.all %} {% for cve in vulnerability.cve_ids.all %}{{cve|upper}}{% endfor %} {% endif %} {% if vulnerability.cwe_ids.all %} {% for cwe in vulnerability.cwe_ids.all %}{{cwe|upper}}{% endfor %} {% endif %}
{% if vulnerability.cvss_metrics %}

CVSS

{{vulnerability.cvss_metrics}}
{% endif %} {% if vulnerability.description %}

Description

{{vulnerability.description|linebreaks}}

{% endif %} {% if vulnerability.impact %}

Impact

{{vulnerability.impact|linebreaks}}

{% endif %} {% if vulnerability.remediation %}

Remediation

{{vulnerability.remediation|linebreaks}}

{% endif %}

Vulnerable URLs

{{vulnerability.http_url}}
{% if vulnerability.references.all %}

References

    {% for ref in vulnerability.references.all %}
  • {{ref}}
    • {% endfor %}
{% endif %}
{% endfor %} {% endfor %}
{% endif %}

END OF REPORT