SysReptor Milestones: Request for Feedback

[aronmolnar]

We have recently defined next possible milestones for the SysReptor project.
Up next are:

• Version history of findings, finding templates, designs (see Version history of findings, finding templates, designs #81)
• Upgrade from Vue/Nuxt/Vuetify 2 to Vue/Nuxt/Vuetify 3
  • incl. UI/UX improvements
  • implementation of new Corporate Identity
• SysReptor CLI for automation

However, there is a lot more to make pentest reporting easier. Our future milestones and ideas are:

• LLM for template writing (LLM for template writing #83)
• Restrict user permissions to one project (Working on customer's infrastructure: restrict user permissions to one project #82)
• Document sharing via SysReptor (Document sharing via SysReptor #80)
• Concurrent editing of findings (Concurrent editing of findings #78)

We created a poll at #88
Please vote :)

Do you have more ideas? Let us know here 👇

[vysecurity]

Wonder if there's any chance of a Word Doc output, or even CSV output for just Findings too.

[aronmolnar]

Wonder if there's any chance [...] CSV output for just Findings too.

CSV export is rather difficult for a generic solution, because we use complex types in reports, like lists or objects that cannot easily be transformed to CSV.

However, I gave you access to our CLI tool, which is still in pre-alpha state (and a private project still). You can use this to export your reports to JSON, TOML or YAML.

You can git clone and...

pip3 install .
reptor conf
# Interactively add your API token, project details, etc.
reptor projects --export json  # or toml or yaml

[aronmolnar]

Wonder if there's any chance of a Word Doc output [...]

docx is a difficult topic. We do not plan to officially support it (mostly due to closed specs, complexity, missing library support, etc.).

I played around with pdf2docx (which could also be integrated to the CLI tool) but the results are far from perfect.

There are issues with background colors. Also, headers and footers are not added as docx-headers/footers, so they are pushed to the next page, as soon as you write in the docx.

Here are two demo reports I converted to docx, just to show...
report.docx
report-oscp.docx

If you have other ideas how to convert or what might otherwise simplify your process for which you need the docx, let us know.

(Thanks for your constant feedbacks, BTW.)

[aronmolnar]

@vysecurity we tested a few more solutions for converting PDFs to docx.
We'd recommend Adobe Acrobat which delivers really good results.