Chapter 13: Reporting and Acting on Your Findings

1. A penetration test report allows you to communicate important information about the issues that have been discovered to stakeholders who are responsible for driving remediation efforts to reduce the security exposure of their environment.
2. The Executive section will contain a high-level view of the penetration test's engagement, and a high-level overview of the findings and risk rating. The technical section will dive into the deep technical details, and is where you will discuss the tools used, the path taken, and the vulnerabilities discovered, together with the recommendations to remediate them.
3. Dradis.
4. The Open Web Application Security Project (OWASP).
5. Exercising good credential hygiene by limiting high privileged accounts from accessing lower trusted systems and randomizing local administrator accounts.

...