Share Reports directly via SysReptor

[aronmolnar]

Problem

After finishing the report process, the PDF must be downloaded and shared via email, Signal, or file sharing platforms.
This is cumbersome and might be error-prone.

Solution

SysReptor could act as a file sharing platform. It could send an e-mail to the recipient with a link to the report. The password could be shared manually via a second channel (or by a Signal bot?).

The password could be for the download itself. The PDF might remain unencrypted. There could be the option for the pentest customer to also password protect the PDF itself. (This would require the PDF to be rendered right before download.)

Additional Improvements

It could also be possible to not only provide the report as download, but also attachments (like evidences, etc.) in an archive.

The pentester could set an expiration time, whitelist source IP addresses, limit the number of downloads, etc.

Drawbacks

This would of course require the installation to be public.