> ## Documentation Index
> Fetch the complete documentation index at: https://docs.d0pam1ne.blackhatethicalhacking.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Asset Mapping Report

> Black Hole Beacon - Internal Asset Discovery by D0pam1ne Pro: everything the beacons mapped inside a client network, as a report you can hand over.

The **Asset Mapping Report** turns what the Black Hole Beacon discovered inside a client network into a client-ready report built only from internal assets, with no external findings mixed in. It lives in the Internal Pentest section of the sidebar, right after **Wireless Rogue Detector**, and every report it builds opens as an **interactive page**, a **printable HTML page** or a **PDF**, in dark or light, branded with your firm's name, website and logo (or the project's own branding when it has one) and signed off in the footer with how it was made: generated with D0pam1ne Pro's Black Hole Beacon, offensive security framework by Black Hat Ethical Hacking, [www.blackhatethicalhacking.com](http://www.blackhatethicalhacking.com).

![The Asset Mapping Report page with the full report builder and the catalogue of focused reports](https://mintcdn.com/black-hat-ethical-hacking/TfYqs88BiS4F5_4-/images/reporting/asset-mapping-report.webp?fit=max\&auto=format\&n=TfYqs88BiS4F5_4-\&q=85\&s=56af274c298578273543f8c9879e822d)

The report catalogue: the full report builder on top, focused reports below

## The full report

The featured card builds the complete report, the **Internal Asset Overview**. Give it a name (it defaults to the title and the client), narrow it to one or more **sites** when the beacons cover several offices or segments, pick the theme, and switch on **per-asset detail** when you want one entry per asset with every service and the reasons behind its risk, which suits an audit and makes the report much longer. **Sections** lets you keep only the parts you need, in this order: an executive summary written in plain language with the headline numbers and the asset mix; prioritized remediations; the riskiest assets; sites; the network map; subnet utilization; private range coverage; the full asset inventory; the software overview; end-of-life software; exposed internal services; the cryptographic inventory; unidentified devices; Wi-Fi and rogue access points; and a short methodology note. The report opens with a numbered contents page (in the PDF with page numbers and dotted leaders), and every breakdown (device types, operating systems, vendors, services, products) carries a one-line takeaway saying how many values there are and which are the most and the least common.

## Fix first

**Prioritized remediations** turn everything the beacons flagged into one list of fixes, ranked by the highest risk each one clears, then by how many assets and instances it covers, so the first lines buy the most risk reduction. Each line merges the beacon's own detections with the internal findings on those assets and states the exact action to take, the reason it matters and the addresses it applies to. Issues that share a fix become one line with their versions listed (every end-of-life operating system is one upgrade job), while fixes that differ per product stay apart (upgrading OpenSSH is not upgrading MySQL). **Riskiest assets** follows with the ten assets carrying the highest risk and the reasons behind each, every address linking to its full entry when per-asset detail is on. **Sites** gives a table of assets, high-risk assets, exposed services, end-of-life assets, unidentified devices, fixes and Wi-Fi per site with an all-sites total, then a short overview of each site with its device mix and its riskiest assets.

![The Fix first tab of the interactive Asset Mapping Report](https://mintcdn.com/black-hat-ethical-hacking/TfYqs88BiS4F5_4-/images/reporting/asset-report-fix-first.webp?fit=max\&auto=format\&n=TfYqs88BiS4F5_4-\&q=85\&s=6f81a2ba0c622ce78bf2e8858c1bc952)

Fix first: every remediation ranked, with the exact action and the assets it covers

## Focused reports

Below the builder, a catalogue of twelve focused reports, each tagged **Analysis**, **Operations**, **Planning** or **Security**, opens one view on its own in the same three formats: the **fix-first remediation plan**, the **riskiest assets**, the **network map**, **subnet utilization**, **private range coverage**, the **site overview**, the **software overview**, the **cryptographic inventory**, **end-of-life assets**, **exposed internal services**, **unidentified devices** and **wireless and rogue access points**. The card decides every format: the printed page and the PDF carry only that card's sections, and the interactive page shows only its tabs and opens on the first one. A card with nothing to show yet says so instead of producing an empty report.

Reports are built on demand from the live data and are not stored: each click generates a fresh one from what the beacons hold at that moment, so after the next sweep you generate again and the new assets are in it. The report name you type is for that generation only.

## What each view shows

The **network map** draws every beacon as a vantage point, the subnets it reached as bands and every asset as a dot, coloured by device type, operating system or risk; in the interactive report you zoom, pan, search and click any dot for the asset's details. **Subnet utilization** lays each /24 out address by address on a 16 by 16 grid, with how full it is, the sites it belongs to, its gateways and how many risky hosts it holds. **Private range coverage** maps 10.0.0.0/8, 172.16.0.0/12 and 192.168.0.0/16 as heat grids that separate what the beacons were asked to scan from where assets were actually found, and calls out **blind spots**: populated ranges that no discovery sweep or internal recon run covered. The **cryptographic inventory** reads the TLS and SSH the beacons observed (protocol versions, certificates, cipher suites, key exchange, host keys and MACs), rates each one unsafe, deprecated, transitional or safe for today and for post-quantum readiness, scores the network and lists the fixes in priority order. The **software overview** groups every product read from a service banner with its versions side by side, each marked end of life, approaching or supported, so uneven patching stands out at a glance. **End-of-life** lists every operating system and service past, or close to, the end of vendor support, oldest first; **exposure** separates cleartext, remote-access and database services worth acting on from the low-risk ones, which are grouped by service so they do not drown the rest; **unidentified devices** gathers the assets the beacons could not classify and those using randomised MAC addresses; and **wireless** lists the networks each beacon can see, flagging possible evil twins, open networks and weak encryption.

![The interactive network map in the Asset Mapping Report](https://mintcdn.com/black-hat-ethical-hacking/4Up5jDv1THoe1Zfh/images/reporting/asset-report-network-map.webp?fit=max\&auto=format\&n=4Up5jDv1THoe1Zfh\&q=85\&s=e94984953a1ede502e09c0178cca2025)

The interactive network map: beacons, subnet bands and every asset

![The cryptographic inventory tab of the interactive Asset Mapping Report](https://mintcdn.com/black-hat-ethical-hacking/4Up5jDv1THoe1Zfh/images/reporting/asset-report-crypto.webp?fit=max\&auto=format\&n=4Up5jDv1THoe1Zfh\&q=85\&s=f919426e36cb51dfe3263616534370ba)

The cryptographic inventory, rated and scored

## The interactive report

The interactive page is one self-contained file the client can open in any browser and keep with **Save HTML**. It has a tab per view (Overview, Fix first, Sites, Network map, Subnets, Coverage, Inventory, Software, End of life, Exposure, Cryptography, Unidentified, Wireless and About), a remediation list filterable by risk, an inventory that filters by type, risk and site, sorts by any column and exports to **CSV**, subnet grids that recolour by type, OS, risk or end-of-life, and a drawer that opens any asset's identity, services and risk reasons from wherever its address appears.

> [!NOTE]
>
> The Asset Mapping Report is part of the Black Hole Beacon, the paid internal module. Without its licence the page and the report endpoints stay hidden. PDF export uses the same engine as the other reports; when it is not installed the PDF button says so, and the printable HTML page prints to PDF from the browser in the meantime.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.