# Penetration Test Report: {{engagement_name}}

**Type:** {{engagement_type}}
**Period:** {{start_date}} — {{end_date}}
**Status:** {{status}}
**Prepared by:** NERF

---

## 1. Executive Summary

{{executive_summary}}

### Overall Risk Rating

| Rating | Count |
|--------|-------|
| Critical | {{critical_count}} |
| High | {{high_count}} |
| Medium | {{medium_count}} |
| Low | {{low_count}} |
| Informational | {{info_count}} |

---

## 2. Scope

**Mission:** {{mission}}

**In-Scope Targets:**

{{targets}}

**Constraints / Rules of Engagement:**

{{constraints}}

---

## 3. Methodology

Testing followed industry-standard methodologies (OWASP Testing Guide, PTES, MITRE ATT&CK):

1. **Reconnaissance:** Asset discovery, technology fingerprinting, OSINT
2. **Enumeration:** Service identification, endpoint mapping, authentication flow analysis
3. **Vulnerability Discovery:** Automated scanning and manual testing
4. **Exploitation:** Proof-of-concept validation for all findings
5. **Post-Exploitation:** Lateral movement, privilege escalation, data access assessment
6. **Reporting:** Risk-rated findings with remediation guidance

---

## 4. Findings

{{#findings}}
### [{{id}}] {{title}}

| Field | Value |
|-------|-------|
| **Severity** | {{severity}} |
| **CVSS** | {{cvss}} |
| **CWE** | {{cwe}} |
| **ATT&CK** | {{attack}} |
| **Location** | {{location}} |

**Description:** {{description}}

**Proof of Concept:**

{{proof}}

**Impact:** {{impact}}

**Remediation:** {{remediation}}

---
{{/findings}}

{{^findings}}
No findings were recorded during this engagement.
{{/findings}}

## 5. Risk Matrix

| ID | Severity | Likelihood | Impact | Title |
|----|----------|-----------|--------|-------|
{{#findings}}
| {{id}} | {{severity}} | {{likelihood}} | {{impact_rating}} | {{title}} |
{{/findings}}

---

## 6. Remediation Roadmap

### Immediate (0-7 days)
{{#remediation_immediate}}
- {{.}}
{{/remediation_immediate}}

### Short-Term (7-30 days)
{{#remediation_short}}
- {{.}}
{{/remediation_short}}

### Long-Term (30-90 days)
{{#remediation_long}}
- {{.}}
{{/remediation_long}}

---

## 7. Coverage

{{coverage}}

---

## 8. Appendix

### A. Tools Used

{{tools_used}}

### B. Timeline

{{timeline}}

### C. Open Questions

{{open_questions}}

### D. Detection Opportunities

{{detection_opportunities}}

---

*Report generated by NERF on {{end_date}}*
