Anhydrite / pwndoc-ng

Pentest Report Generator

PwnDoc-ng

PwnDoc-ng is a pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report. It is based on original fork of PwnDoc work by yeln4ts. The main goal is to have more time to Pwn and less time to Doc by mutualizing data like vulnerabilities between users.

Example Template	Generated document

What's New ?

PwnDoc was originaly manage by its creator. After months of absence, an increase of issues and pending pull requests, we decided to open this maintained fork.

This fork includes pending PR and new feature such as:

• Fix build error due to Node version
• Fix LFI/RCE vulnerability
• Tiptap 2.0 WYSIWYG
• Collaborative editing
• Table support
• New filters
• Reviewer variable
• Remediation complexity color by @Syzik
• Mongo-data volume from @noraj
• Minor bumps ...

Documentation

• Installation
• Data
• Vulnerabilities
• Audits
• Templating

Features

• Multiple Language support
• Multiple Data support
• Great Customization
  • Manage reusable Audit and Vulnerability Data
  • Create Custom Sections
  • Add custom fields to Vulnerabilities
• Vulnerabilities Management
• Multi-User reporting
• Docx Report Generation
• Docx Template customization

Demos

Multi-User reporting

Finding edition

Vulnerability management workflow

Contribute

Developing with docker-compose

Simply copy docker-compose.override.example-dev.yml to docker-compose.override.yml and run docker compose up!

cp docker-compose.override.example-dev.yml docker-compose.yml
docker compose up --build

Feel free to contribute :).