Reporting Tools
Turning engagement findings into something a client can actually read: note-taking during the test, evidence capture, and finding aggregation.
| Tool | Source | Notes |
|---|---|---|
| cherrytree | official | Hierarchical note-taking — evidence/findings organization during an engagement |
| eyewitness-git | aur | Screenshots web/RDP/VNC services for report evidence |
| faraday-bin | aur | Integrated pentest platform — collects tool output, dedupes findings, generates reports |
| cutycapt-qt5-git | aur | Headless webpage screenshot capture for report evidence |
The ATT&CK Navigator webapp pairs naturally with this category for mapping findings to MITRE ATT&CK tactics and techniques.