reptor allows you to automate pentest reporting with SysReptor.
- Create findings and notes from tool outputs
- Upload evidences (also bulk upload)
- Import data from other reporting tools
GitHub: https://github.com/Syslifters/reptor/
Docs: https://docs.sysreptor.com/cli/getting-started
Setup: https://docs.sysreptor.com/cli/setup
PyPi: https://pypi.org/project/reptor/
- Python 3.8-3.11
- pip3
pip3 install reptor
- translate (requires deepl)
- ghostwriter (requires gql)
- dev (requires pytest)
Install by pip3 install reptor[translate].
Install all optional dependencies using pip3 install reptor[all]
git clone https://github.com/Syslifters/reptor.git
cd reptor
pip3 install .
Install optional dependencies by pip3 install .[all].
Get your API token from https:///users/self/apitokens/.
reptor conf
Server [https://demo.sysre.pt]:
API Token [Create at https://demo.sysre.pt/users/self/apitokens/]:
Project ID:
Store to config to C:\Users\aron\.sysreptor\config.yaml? [y/n]:
[--private-note] [-f] [-v] [--debug] [-n NOTETITLE]
[--no-timestamp] [--file FILE]
Examples:
reptor conf
echo "Upload this!" | reptor note
reptor file data/*
cat sslyze.json | reptor sslyze --json --push-findings
cat nmap.xml | reptor nmap --xml --upload
optional arguments:
-h, --help show this help message and exit
-v, --verbose increase output verbosity (> INFO)
--debug sets logging to DEBUG
-n NOTETITLE, --notetitle NOTETITLE
--no-timestamp do not prepend timestamp to note
--file FILE Local file to read
subcommands:
Core:
conf Shows config and sets config
plugins Allows plugin management & development
Projects & Templates:
projectfindings Export your project findings as a summary or checklist
translate Translate Projects to other languages via Deepl
template Queries Finding Templates from SysReptor
project Work with projects
Uploads:
file Uploads a file
finding Uploads findings from JSON or TOML
note Uploads and lists notes
Tools:
sslyze format sslyze JSON output
nmap format nmap output
zap Parses ZAP reports (JSON, XML)
Importers:
ghostwriter Imports GhostWriter finding templates
importers Show importers to use to import finding templates
configuration:
-s SERVER, --server SERVER
-t TOKEN, --token TOKEN
SysReptor API token
-k, --insecure do not verify server certificate
-p PROJECT_ID, --project-id PROJECT_ID
SysReptor project ID
--private-note add notes to private notes
-f, --force-unlock force unlock notes