Skills to write amazing pentest reports

A pentest is a journey of discovery, but a report is the destination.
A good report summarizes the journey, highlights the discoveries, and guides the next steps.

This project is rapidly evolving. Please take the contents with a pinch-of-salt. If you would like to contribute, please reach out to me, @abhi, on #appsec OWASP Slack channel. We would like to invite you there!

We have no control over the contents in the library. They are donated by CISA and Carnegie Mellon University.