SecReport

SecReport

Supported by ChatGPT, multi-person collaborative information security penetration test report编写/导出platform

Official website

• Standardized penetration testing process
• Multiple collaborative editing
• Custom export templates
• Introduction to ChatGPT generation vulnerability and fixing solution
• APP Security Compliance Test Report

The report template demo has been uploaded to the template folder. The community is welcome to submit high-quality report templates through PR. High-quality templates will be automatically integrated into the official template library in subsequent versions.

---

Community version of private deployment plan

The stand-alone version is for community communication and learning only. Any commercial/OEM behavior is prohibited. Please contact the email address of [email protected] for the commercial version.

Install && Run

mkdir SecReport && cd SecReport
wget https://raw.githubusercontent.com/sec-report/SecReport/main/run.sh
chmod +x run.sh
./run.sh

Run.sh command introduction

After all Docker is run, visit http://127.0.0.1/ to initialize the administrator account

activation

Follow the WeChat official account:信息安全报告, click激活码in the menu bar of the official account - SecReport to obtain the activation code.

After obtaining the activation code, please bind in the background:后台管理-证书管理.

Version Differences

	Official website version	Community Edition	Commercial version
user	/	5 people	Unlimited
Number of reports	Unlimited	10	Unlimited
Report Type	Penetration testing, APP testing	Penetration testing	Penetration testing, APP testing
SSO	/	Not supported	support
price	Limited time free	Non-commercial free	Contact WeChat or email

Communication group

Please add friends and note: SecReport加群

TODO

• Retest report generation
• Support multiple retests
• Temporary information synchronization fixed nail window with multiple people
• Integrate community standalone version to Docker Hub
• Provide report template demo
• APP Security Compliance Test Report
• APP Security Compliance Test Report Custom Template
• Add custom template error reporting mechanism
• Adding a system field to the penetration test report vulnerability list
• Private deployment version user management function
• Private deployment version custom test process template function
• Can private deployment version be configured whether it is open to register
• Add SSO login mode to private deployment version
• Penetration test report adds the function of uploading penetration test authorization letter
• Emergency tracing and disposal report, including log analysis functions such as access.log

Run.sh command introduction

 # 启动服务
./run.sh

# 停止服务
./run.sh stop

# 更新平台
./run.sh update

# 添加用户
./build.sh exec addUser -username xxx -password xxx -role admin

# 修改用户密码
./build.sh exec changeUserPassword -username xxx -password xxx

# 设置是否开启基础登录
./build.sh exec setBasisLogin -enabled true 

Other works

SecAutoBan: The security device alarm IP is fully automatic banned platform, supporting millions of IPs to analyze and process in seconds.

Star History