Database of Findings

Off-topic
1

Hello all!

I’m finishing up polishing my reporting skills before I give it a try to the CPTS Exam, and a question surges:

Is there any public database of findings?

I imagine that as pentesters come across the same findings multiple times (for example, Weak Credentials), there could be a database with that information.

I tried using reporting tools such as SysReptor and WriteHat, but the Findings Databases are basically empty (SysReptor has about 10 templates).

I also tried googling but didn’t find anything helpful.

I really appreciate any help you can provide.

Happy hacking :slight_smile:

2

No there isn’t a central public database exists for findings like Weak Credentials. Explore OWASP, NIST’s NVD, and engage with the security community for insights. Keep in mind that specific organizations may have their own databases.