Web Report refactor

[domwhewell-sage]

Hi, I was looking to open an issue to have WEBSCREENSHOT included in the web_report output for each URL.

However it also occurred to me that Code assets (CODE_REPOSITORY & MOBILE_APP) could be included aswell i.e.

Web Assets:

• URL
WEBSCREENSHOT
  • TECHNOLOGY
  • FINDING
  • VULNERABILITY

Code Assets:

• CODE_REPOSITORY
  • FINDING
  • VULNERABILITY
• MOBILE_APP
  • FINDING
  • VULNERABILITY

I think to do this the current iteration of the html report needs to be refactored? The output module should only need to consume URL, CODE_REPOSITORY and MOBILE_APP events then for each of those crawl down the chain to add any of the other events it comes across.

What do you think? I know you guys are working on a bbot server this could be something to save for that

[liquidsec]

I like this idea, but it might be a while before I get to it. I honestly didn't know people were really using the web report, I think it could definitely be improved and a screenshot would be perfect.

I'd probably wait until we replace gowitness with whatever our permanent screenshot solutions will be.