Legal & Compliance
Offensive Reporting
Penetration test and red team report writing methodology. Covers executive summary structuring (risk-led narrative for non-technical readers), technical finding format (title, severity, affected scope, narrative, reproduction steps, impact, remediation, references), CVSS v3.1 / v4.0 scoring with vector justification, OWASP risk rating, evidence hygiene (redacting credentials, hashing client data, time-stamping every action), screenshot and PoC artifact management, finding chain narratives, scope/limitations/assumptions documentation, retest evidence and remediation tracking, deliverable formats (PDF, DOCX, HTML, JSON for SIEM ingestion), client-customer-deliverable separation, and common report mistakes (over-CVSSing, undermining the triager, missing the 'so what'). Use at the end of an engagement when authoring a deliverable, when restructuring a draft for executive readability, or when establishing a reusable report template for a consulting practice.
- Publisher / source
- SnailSploit/Claude-Red (found on GitHub top repositories)
- Upstream record
- SnailSploit/Claude-Red
- Version
- Version 1
- Published
- Publication review
- Approved for publication · recorded passed scan 2026-11-04
- Content fingerprint
b9a8bf71828399c75c6c877e0768e4f916adbea352010e2fed06e57f06786200