{% extends "base.html" %} {% block title %}Audit{% endblock %} {% block headerEnd %} {% endblock %} {% block content %}

Audit

Regular workflow

  1. Create Audit in PwnDoc
  2. Refresh this page and select it in the selector:
  3. Import scan results using scan2report
  4. Go to PwnDoc and work on the audit
  5. When you "finish" a new finding that didn't have a prepared template, save the finding and also click button "Propose Creation / Update in Vulnerability Database". After the creation/update is accepted, it will be available for reuse during next imports.
  6. When audit is ready, trigger this workaround for a bug (re-uploads services for the table of open-ports)
  7. After that you can download the docx report in PwnDoc, or if it times-out, you can extend the download time.
  8. If you need the findings in machine readable format, you can download them here - JSON, CSV.

Other actions

PwnDoc audit doesn't contain just findings, but also text sections (e.g. executive summary). These can also be downloaded as JSON, though beware that the structure of the the JSON is somewhat complicated.

If you've modified some of the scan2report config files (for example groups.json), you can check whether a reimport would change the audit. If it would, you can from delete the relevant findings from that view, and then perform a new import.
Importer performs two types of grouping:

{% endblock %}