-
Notifications
You must be signed in to change notification settings - Fork 0
Reporting
Menu key: 5 · File: lib/modules/report.sh · Entry point:
kraken_report_run
Walks the current session directory and aggregates every module's output into a single report. As of v1.2 it produces two formats side by side.
| File | Format | Use |
|---|---|---|
REPORT_<timestamp>.txt |
Plaintext | terminal review, grep, legacy tooling |
REPORT_<timestamp>.md |
Markdown | paste into tickets, wikis, client deliverables |
Both are generated from the same session data in one pass, so they stay consistent. The plaintext format is unchanged from earlier versions.
-
Header – generation time, operator (
user@host), session name. - Executive summary – total findings, hosts scanned, open ports, vulnerabilities, scope (the list of targets), output directory.
- Reconnaissance – per-target subdomain counts and DNS records.
- Port scanning – per-target open ports and detected services.
- Web enumeration – per-target HTTP status, discovered paths, technologies.
- Vulnerability assessment – per-target findings.
- Recommendations – standard remediation guidance.
The Markdown variant renders the summary as a table and each module as headings with fenced code blocks, so it is readable as-is on GitHub or in any Markdown viewer.
| Metric | Source |
|---|---|
| Total findings | lines matching MISSING_HEADER / HTTP_METHODS / INFO_DISCLOSURE across all findings.txt
|
| Hosts scanned | count of recon_* and scan_* directories |
| Open ports | sum of open lines across all nmap_services.txt
|
| Scope | target names parsed from the recon_/scan_/web_/vuln_ directory prefixes |
After generation Kraken offers to open the report immediately (via
less if available, else cat) and prints the paths so you can open
them later:
cat kraken_output/<session>/REPORT_<timestamp>.txt
less kraken_output/<session>/REPORT_<timestamp>.md- Run the report after the other modules, it only sees files that already exist in the session.
- Re-running creates a new timestamped pair, it never overwrites a previous report.
- See Output Structure for where reports live within a session.
Kraken Pentest Framework · MIT License · Maintained by Melvin PETIT · For authorized security testing only.
Getting started
Reference
Modules
Development
More