Report sample
Sample vulnerability scan report
A redacted SkilledScan report. One finding is written out in full so you can see the level of detail in each entry.
Web application security scan
Confidential security report
- Scan type
- Black-box web application scan
- Scope
- One web application, agreed in writing
- Status
- Delivered
- Prepared by
- SkilledScan
At a glance
- medium
- 4 medium
- low
- 11 low
- info
- 23 info
Contents
- 01Executive summary
- 02Risk breakdown
- 03Scope and rules of engagement
- 04Methodology
- 05Findings, each with evidence and a fix
- 06Remediation summary
- 07Coverage: what was tested and what was not
- 08Tools and references appendix
Sample finding
Server and framework versions disclosed in HTTP response headers
https://app.example-redacted.com/
The application returns response headers that name the web server and framework, including version numbers. This hands an attacker a precise target: known weaknesses for a named version can be looked up and tried directly, which shortens the time from first contact to a working exploit.
HTTP/2 200 server: [redacted]/[version redacted] x-powered-by: [redacted]/[version redacted] cache-control: no-store
Response headers observed on the application root. Redacted for the public sample.
Business impact
On its own this does not compromise the application. Combined with an unpatched component it lets an attacker skip reconnaissance and go straight to a matching exploit.
Fix
Remove or mask the Server and X-Powered-By headers at the web server or reverse proxy. Confirm no version string is returned on any route, including error pages.
Confidence
Confirmed
Anatomy of a finding
Tools and references
Reports include an appendix listing the professional tools used, so your auditor can see the method.
- Interception and manual testing
- Burp Suite Professional, Postman
- Scanning
- Acunetix, HCL AppScan
- Reconnaissance
- Shodan, theHarvester
- References
- NVD, public exploit and advisory databases
This is a redacted sample for illustration. Real reports carry full evidence and client detail under the engagement agreement.
Next step
Want a report like this for your app?
Email contact@skilledscan.com with the application or API you want scanned. Written authorization is confirmed before any scan runs.