search

GovTech-CSG / Autowasp

BurpSuite Extension: A one-stop pen testing checklist and logger tool
MIT License
74 stars 45 forks source link

Suggestion: Add "Done" and "Host" column in the Checklist #6

Closed Regala closed 3 years ago

Regala commented 3 years ago

Hi folks! First off awesome job with this extension, it solves a gap in the pentesters flow and it's really well documented.

I have a couple of suggestions, which I'd love to be added. The first is adding a "Done" column, equal to the "To Exclude". Basically this would allow us to keep track of what tests have been done and complement the excluded tests very nicely.

The second one would be adding a host column. I assume this is much more tricky and probably not for everyone. But personally, when testing a target I have multiple targets/hosts. As such, for me to cover everything I need to distinguish the tests done in one host for another. With that host tab, I could make sure that all the tests were done and covered in all of the scope. I'm not sure the best way to implement this - e.g. duplicating the checklist items for every host in scope to test, or being able to duplicate only some items, or simply making the host column a text input where we could manually write the targets we tested.

Very crude mockup:

suggestion_ (1)

Thanks and keep up the good work!

imthomas93 commented 3 years ago

Hi @Regala.

Thank you for using and your feedback for Autowasp. For the first feature request, I agree that we can do better by adding the Done column into the testing checklist tool for a better user experience. This will be in our product pipeline for upcoming release.

For your second feedback, yes, adding a host column could be tricky as a pen-tester might use be testing an application with multiple different endpoint. Do let us discuss internally and see how can we implement this to make the feature better.

Once again! Thank you for your support!

imthomas93 commented 3 years ago

Hi @Regala,

Just an update, we have added the "completed" checkbox in our minor updates. In future, we are exploring using this checkbox to populate information - "No vulnerability exception noted" when populating the checklist into our excel report.

Thanks for your support in using Autowasp 👍

@imthomas93

Regala commented 3 years ago

Awesome!! Cheers!

On Tue, Apr 13, 2021 at 7:42 AM Thomas James Lim @.***> wrote:

Hi @Regala https://github.com/Regala,

Just an update, we have added the "completed" checkbox in our minor updates. In future, we are exploring using this checkbox to populate information - "No vulnerability exception noted" when populating the checklist into our excel report.

Thanks for your support in using Autowasp 👍

@imthomas93 https://github.com/imthomas93

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/GovTech-CSG/Autowasp/issues/6#issuecomment-818483033, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAKRBL74ONCBRLFQ26HU2V3TIPRW7ANCNFSM4ZACNBOQ .