Pentest Finding & Deliverable Generator
Full offline CVSS v4.0 & v3.1 scoring calculator with verified vulnerability presets, technical root cause analysis, PoC terminal evidence, and 1-click export to Executive-ready Markdown, DefectDojo JSON, and Jira.
Exact MacroVector scoring with new Attack Requirements (AT) and Subsequent Impact metrics.
Pre-configured findings for AS-REP Roasting, LLMNR, SMB Signing, Weak Ciphers, and Shadow Credentials.
Direct output to Executive Markdown deliverables, DefectDojo API JSON, and Jira tickets.
Structured C-suite risk summaries alongside detailed tactical remediation scripts and GPO settings.
PRESET VULNERABILITY TEMPLATES // CONSULTANT REPOSITORY
1. EXPLOITABILITY METRIC GROUP (ATTACK CONDITIONS)
Remotely exploitable across the internet or boundary network without physical or subnet proximity.
Specialized access conditions or extenuating circumstances do not exist. Repeatable exploitation.
The attack does not depend on deployment-specific configurations or non-default prerequisites.
Requires standard user privileges (e.g. standard domain account, guest role, or basic subscriber).
Vulnerability can be exploited without any interaction from another human user.
2. VULNERABLE SYSTEM IMPACT (DIRECT TARGET COMPONENT)
Total loss of confidentiality; all data exposed.
No loss of integrity within the vulnerable system.
No impact to availability of the vulnerable system.
3. SUBSEQUENT SYSTEM IMPACT (DOWNSTREAM / LATERAL SYSTEMS)
Replaces legacy CVSS v3.1 Scope (S:U / S:C) with explicit downstream impact modelingTotal loss of confidentiality on connected/downstream databases or secondary systems.
Complete lateral compromise of downstream systems (e.g. domain takeover, cloud pivot).
No availability impact to subsequent systems.
INTEGRATED TRADECRAFT ECOSYSTEM
Offline interactive diagnostic workflow for Active Directory Certificate Services and Kerberos delegation attacks.
Draft standardized military-grade Rules of Engagement, deconfliction protocols, and cryptographic SHA-256 validation stamps.
Multi-tier network tunneling and reverse port forwarding command generator for complex pivot scenarios.