Merge branch 'cbbh-fix-approach' into 'main'

Update executive summary section in HTB CBBH design

See merge request reportcreator/reportcreator!1034

Author: MWedl

CHANGELOG.md

@@ -3,6 +3,7 @@
 ## Upcoming
 * Fix date field empty value not saved as null
 * Markdown editor: fix pasted images not inserted correctly in some cases
+* Update executive summary section in HTB CBBH design
 
 
 ## v2025.69 - 2025-08-13

demo_data/htb-demo-projects/cbbh.toml

@@ -52,7 +52,24 @@ pentest_approach = "BLACKBOX"
 report_version = "TODO 1.0"
 customer_contacts = []
 executive_summary = """
-{{ report.customer_full }} (“{{ report.customer_short }}” herein) invited {{ report.candidate.name }} to a private bug bounty program to perform a targeted Web Application Penetration Test of {{ report.customer_short }}’s externally facing web applications to identify high-risk security weaknesses, determine the impact to {{ report.customer_short }}, document all findings in a clear and repeatable manner, and provide remediation recommendations. The following types of findings were in-scope for this private bug bounty program: 
+{{ report.customer_full }} (“{{ report.customer_short }}” herein) invited {{ report.candidate.name }} to a private bug bounty program to perform a targeted Web Application Penetration Test of {{ report.customer_short }}’s externally facing web applications to identify high-risk security weaknesses, determine the impact to {{ report.customer_short }}, document all findings in a clear and repeatable manner, and provide remediation recommendations.
+"""
+approach = """
+{{ report.candidate.name }} performed testing under a “{{ report.pentest_approach.label }}” approach from {{ formatDate(report.pentest_start, 'long') }}, to {{ formatDate(report.pentest_end, 'long') }} without credentials or any advance knowledge of {{ report.customer_short }}’s web applications with the goal of identifying unknown weaknesses. Testing was performed from a non-evasive standpoint with the goal of uncovering as many misconfigurations and vulnerabilities as possible. Testing was performed remotely. Each weakness identified was documented and manually investigated to determine exploitation possibilities and escalation potential. {{ report.candidate.name }} sought to demonstrate the full impact of every vulnerability, up to and including internal network access.
+"""
+scope = """
+The scope of this assessment was as follows TODO *.trilocor.local and any and all open web server ports discovered on the target IP address provided at the start of the assessment.
+
+| Host/URL/IP Address | Description |
+|:---|:---|
+| TODO www.triclor.local | Main Trilocor website/unauthenticated |
+| TODO exam IP address  | PR website/unauthenticated |
+| TODO exam IP address  | Jobs Portal/unauthenticated |
+| TODO exam IP address  | HR website/unauthenticated |
+| TODO exam IP address  | Trilocor online store/unauthenticated |
+
+
+The following types of findings were in-scope for this private bug bounty program: 
 
 * Sensitive or personally identifiable information disclosure
 * Cross-Site Scripting (XSS)
@@ -77,20 +94,6 @@ The following types of activities were considered out-of-scope for this bug boun
 * Issues with SSL certificates, open ports, TLS versions, or missing HTTP response headers
 * Vulnerabilities in third party libraries unless they can be leveraged to significantly impact the target
 * Any theoretical attacks or attacks that require significant user interaction or low risk
-
-{{ report.candidate.name }} performed testing under a “{{ report.pentest_approach.label }}” approach from {{ formatDate(report.pentest_start, 'long') }}, to {{ formatDate(report.pentest_end, 'long') }} without credentials or any advance knowledge of {{ report.customer_short }}’s web applications with the goal of identifying unknown weaknesses. Testing was performed from a non-evasive standpoint with the goal of uncovering as many misconfigurations and vulnerabilities as possible. Testing was performed remotely. Each weakness identified was documented and manually investigated to determine exploitation possibilities and escalation potential. {{ report.candidate.name }} sought to demonstrate the full impact of every vulnerability, up to and including internal network access.
-"""
-scope = """
-The scope of this assessment was as follows TODO *.trilocor.local and any and all open web server ports discovered on the target IP address provided at the start of the assessment.
-
-### In Scope Assets
-| Host/URL/IP Address | Description |
-|:---|:---|
-| TODO www.triclor.local | Main Trilocor website/unauthenticated |
-| TODO exam IP address  | PR website/unauthenticated |
-| TODO exam IP address  | Jobs Portal/unauthenticated |
-| TODO exam IP address  | HR website/unauthenticated |
-| TODO exam IP address  | Trilocor online store/unauthenticated |
 """
 assessment_overview = """
 During the course of testing against {{ report.candidate.name }} identified ...
@@ -99,9 +102,9 @@ TODO SUMMARY OF FINDINGS AND RECOMMENDATIONS HERE
 """
 
 [report_data.candidate]
-a_name = "TODO Candidate Name"
-b_title = "TODO Candidate Title"
-c_email = "TODO Candidate Email"
+title = "TODO Candidate Title"
+name = "TODO Candidate Name"
+email = "TODO Candidate Email"
 
 [[findings]]
 id = "dd47a6dd-5f26-4920-a48e-a1ff002e0a47"

demo_data/htb-designs/cbbh.toml

@@ -1,6 +1,6 @@
 format = "projecttypes/v2"
 id = "8412f94b-7eb7-4508-9397-0e1b8da5f066"
-name = "HTB CBBH Report v1.1"
+name = "HTB CBBH Report v1.2"
 language = "en-US"
 status = "finished"
 tags = [
@@ -875,7 +875,38 @@ type = "markdown"
 label = "Executive Summary"
 origin = "custom"
 default = """
-{{ report.customer_full }} (“{{ report.customer_short }}” herein) invited {{ report.candidate.name }} to a private bug bounty program to perform a targeted Web Application Penetration Test of {{ report.customer_short }}’s externally facing web applications to identify high-risk security weaknesses, determine the impact to {{ report.customer_short }}, document all findings in a clear and repeatable manner, and provide remediation recommendations. The following types of findings were in-scope for this private bug bounty program: 
+{{ report.customer_full }} (“{{ report.customer_short }}” herein) invited {{ report.candidate.name }} to a private bug bounty program to perform a targeted Web Application Penetration Test of {{ report.customer_short }}’s externally facing web applications to identify high-risk security weaknesses, determine the impact to {{ report.customer_short }}, document all findings in a clear and repeatable manner, and provide remediation recommendations.
+"""
+required = true
+
+[[report_sections.fields]]
+id = "approach"
+type = "markdown"
+label = "Approach"
+origin = "custom"
+default = """
+{{ report.candidate.name }} performed testing under a “{{ report.pentest_approach.label }}” approach from {{ formatDate(report.pentest_start, 'long') }}, to {{ formatDate(report.pentest_end, 'long') }} without credentials or any advance knowledge of {{ report.customer_short }}’s web applications with the goal of identifying unknown weaknesses. Testing was performed from a non-evasive standpoint with the goal of uncovering as many misconfigurations and vulnerabilities as possible. Testing was performed remotely. Each weakness identified was documented and manually investigated to determine exploitation possibilities and escalation potential. {{ report.candidate.name }} sought to demonstrate the full impact of every vulnerability, up to and including internal network access.
+"""
+required = true
+
+[[report_sections.fields]]
+id = "scope"
+type = "markdown"
+label = "Scope"
+origin = "custom"
+default = """
+The scope of this assessment was as follows TODO *.trilocor.local and any and all open web server ports discovered on the target IP address provided at the start of the assessment.
+
+| Host/URL/IP Address | Description |
+|:---|:---|
+| TODO www.triclor.local | Main Trilocor website/unauthenticated |
+| TODO exam IP address  | PR website/unauthenticated |
+| TODO exam IP address  | Jobs Portal/unauthenticated |
+| TODO exam IP address  | HR website/unauthenticated |
+| TODO exam IP address  | Trilocor online store/unauthenticated |
+
+
+The following types of findings were in-scope for this private bug bounty program: 
 
 * Sensitive or personally identifiable information disclosure
 * Cross-Site Scripting (XSS)
@@ -900,27 +931,6 @@ The following types of activities were considered out-of-scope for this bug boun
 * Issues with SSL certificates, open ports, TLS versions, or missing HTTP response headers
 * Vulnerabilities in third party libraries unless they can be leveraged to significantly impact the target
 * Any theoretical attacks or attacks that require significant user interaction or low risk
-
-{{ report.candidate.name }} performed testing under a “{{ report.pentest_approach.label }}” approach from {{ formatDate(report.pentest_start, 'long') }}, to {{ formatDate(report.pentest_end, 'long') }} without credentials or any advance knowledge of {{ report.customer_short }}’s web applications with the goal of identifying unknown weaknesses. Testing was performed from a non-evasive standpoint with the goal of uncovering as many misconfigurations and vulnerabilities as possible. Testing was performed remotely. Each weakness identified was documented and manually investigated to determine exploitation possibilities and escalation potential. {{ report.candidate.name }} sought to demonstrate the full impact of every vulnerability, up to and including internal network access.
-"""
-required = true
-
-[[report_sections.fields]]
-id = "scope"
-type = "markdown"
-label = "Scope"
-origin = "custom"
-default = """
-The scope of this assessment was as follows TODO *.trilocor.local and any and all open web server ports discovered on the target IP address provided at the start of the assessment.
-
-### In Scope Assets
-| Host/URL/IP Address | Description |
-|:---|:---|
-| TODO www.triclor.local | Main Trilocor website/unauthenticated |
-| TODO exam IP address  | PR website/unauthenticated |
-| TODO exam IP address  | Jobs Portal/unauthenticated |
-| TODO exam IP address  | HR website/unauthenticated |
-| TODO exam IP address  | Trilocor online store/unauthenticated |
 """
 required = true
 
@@ -1124,7 +1134,24 @@ pentest_end = "2023-05-31"
 report_date = "2023-05-31"
 report_version = "1.0"
 executive_summary = """
-{{ report.customer_full }} (“{{ report.customer_short }}” herein) invited {{ report.candidate.name }} to a private bug bounty program to perform a targeted Web Application Penetration Test of Trilocor’s externally facing web applications to identify high-risk security weaknesses, determine the impact to Trilocor, document all findings in a clear and repeatable manner, and provide remediation recommendations. The following types of findings were in-scope for this private bug bounty program: 
+{{ report.customer_full }} (“{{ report.customer_short }}” herein) invited {{ report.candidate.name }} to a private bug bounty program to perform a targeted Web Application Penetration Test of {{ report.customer_short }}’s externally facing web applications to identify high-risk security weaknesses, determine the impact to {{ report.customer_short }}, document all findings in a clear and repeatable manner, and provide remediation recommendations.
+"""
+approach = """
+{{ report.candidate.name }} performed testing under a “{{ report.pentest_approach.label }}” approach from {{ formatDate(report.pentest_start, 'long') }}, to {{ formatDate(report.pentest_end, 'long') }} without credentials or any advance knowledge of {{ report.customer_short }}’s web applications with the goal of identifying unknown weaknesses. Testing was performed from a non-evasive standpoint with the goal of uncovering as many misconfigurations and vulnerabilities as possible. Testing was performed remotely. Each weakness identified was documented and manually investigated to determine exploitation possibilities and escalation potential. {{ report.candidate.name }} sought to demonstrate the full impact of every vulnerability, up to and including internal network access.
+"""
+scope = """
+The scope of this assessment was as follows TODO *.trilocor.local and any and all open web server ports discovered on the target IP address provided at the start of the assessment.
+
+| Host/URL/IP Address | Description |
+|:---|:---|
+| TODO www.triclor.local | Main Trilocor website/unauthenticated |
+| TODO exam IP address  | PR website/unauthenticated |
+| TODO exam IP address  | Jobs Portal/unauthenticated |
+| TODO exam IP address  | HR website/unauthenticated |
+| TODO exam IP address  | Trilocor online store/unauthenticated |
+
+
+The following types of findings were in-scope for this private bug bounty program: 
 
 * Sensitive or personally identifiable information disclosure
 * Cross-Site Scripting (XSS)
@@ -1140,7 +1167,7 @@ executive_summary = """
 The following types of activities were considered out-of-scope for this bug bounty program:
 
 * Scanning and assessing any other IP in the Entry Point's network
-* Physical attacks against Trilocor properties
+* Physical attacks against {{ report.customer_short }} properties
 * Unverified scanner output
 * Man-in-the-Middle attacks
 * Any vulnerabilities identified through DDoS or spam attacks
@@ -1149,20 +1176,6 @@ The following types of activities were considered out-of-scope for this bug boun
 * Issues with SSL certificates, open ports, TLS versions, or missing HTTP response headers
 * Vulnerabilities in third party libraries unless they can be leveraged to significantly impact the target
 * Any theoretical attacks or attacks that require significant user interaction or low risk
-
-{{ report.candidate.name }} performed testing under a “{{ report.pentest_approach.label }}” approach from {{ formatDate(report.pentest_start, 'long') }}, to {{ formatDate(report.pentest_end, 'long') }} without credentials or any advance knowledge of {{ report.customer_short }}’s web applications with the goal of identifying unknown weaknesses. Testing was performed from a non-evasive standpoint with the goal of uncovering as many misconfigurations and vulnerabilities as possible. Testing was performed remotely. Each weakness identified was documented and manually investigated to determine exploitation possibilities and escalation potential. {{ report.candidate.name }} sought to demonstrate the full impact of every vulnerability, up to and including internal network access.
-"""
-scope = """
-The scope of this assessment was as follows TODO *.trilocor.local and any and all open web server ports discovered on the target IP address provided at the start of the assessment.
-
-### In Scope Assets
-| Host/URL/IP Address | Description |
-|:---|:---|
-| TODO www.trilocor.local | Main Trilocor website/unauthenticated |
-| TODO exam IP address  | PR website/unauthenticated |
-| TODO exam IP address  | Jobs Portal/unauthenticated |
-| TODO exam IP address  | HR website/unauthenticated |
-| TODO exam IP address  | Trilocor online store/unauthenticated |
 """
 assessment_overview = """
 During the course of testing against {{ report.candidate.name }} identified ...