Vulnerability › Module 10 › Lesson 3
Report Pack
Bundle exec report, findings, tracker, retest — YOUR lab VA deliverable set.
Visual · t18_report_pack
Report pack = handoff bundle for defender stakeholders. Original Cyberlium.
Opening
One zip with index and redactions beats ten disconnected files named scan(1).pdf.
Assemble report pack for $LAB_ASSETS capstone: cover letter (scope one paragraph), executive summary PDF, full findings appendix, evidence index, remediation tracker export, retest closure log, RoE copy. Single directory or zip chmod 600 — index.md lists contents. Mentor-facing copy redacts internal IPs if required. No stranger scan data, no exploit PoC files, no breach paste. Gap paragraph: what next engagement would add (credentialed scan, more assets) on YOUR bench only.
1. Pack contents
Minimum: report, triage summary, tracker, retest log, evidence index, RoE.
Optional: CVSS annotation sheet from Module 6 lab.
Command guide
Try these commands — Pack contents
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Capstone prep — merge inventory + finding + remediation Greenbone — https://www.greenbone.net/en/openvas/
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install nmap
macOS:
Command — copy this
brew install nmap
Windows:
Command — copy this
choco install nmap # or download https://nmap.org/download.html
═══ LINUX / macOS ═══
Command — copy this
grep -h . "$HOME/cyberlium-lab/t18-finding.txt" "$HOME/cyberlium-lab/t18-remediation.txt" 2>/dev/null | head -15 source "$HOME/cyberlium-lab/t18-lab.env"; nmap -sC -sV --top-ports 10 "$LAB_HOST" | head -25
Primary tools to practice this lesson: nmap, grep. Reference sites: Capstone prep; Greenbone (https://www.greenbone.net/en/openvas/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Cover letter
Scope, dates, tools, limitations (lab VLAN, no prod), contact you.
Statement: no unauthorized targets included.
3. Gap honesty
Note N/A items and planned improvements on owned lab — not filler from stranger scans.
Teardown: secure pack, revoke scan creds.
4. What you ship: VA report pack
Bundled deliverables + index + cover letter — chmod 600.
5. What you record before the next lesson
Report pack path.
6. Wrong vs right: stranger nets vs YOUR lab assets
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
Add Shodan findings to pack for 'broader coverage.'
Right
Report pack assembled. Next: capstone lab.
Mission: assemble report pack
1) Bundle report tracker retest index RoE. 2) Write cover letter scope paragraph. 3) Gap paragraph; secure pack.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Cover letter length?”
Knowledge Check
APPLY: Report pack includes:
Multiple choice
Knowledge Check
APPLY: True or False: Stranger scan data belongs in pack.
True or False
Knowledge Check
APPLY: Cover letter states:
Multiple choice