> ## Documentation Index
> Fetch the complete documentation index at: https://docs.d0pam1ne.blackhatethicalhacking.com/llms.txt
> Use this file to discover all available pages before exploring further.

# PDF report and finding anatomy

> The fixed-layout house document, and the full per-finding anatomy behind every issue.

**Download PDF** and **Open HTML** give the fixed-layout house document for sending or printing: a branded cover, confidentiality notice, the found-vulnerabilities list, and a full write-up per finding.

![The PDF report cover page](https://mintcdn.com/black-hat-ethical-hacking/RPEWzJ10O7hxCV8s/images/reporting/report-pdf.webp?fit=max\&auto=format\&n=RPEWzJ10O7hxCV8s\&q=85\&s=a71d4cd91b515bee48ae2e7c78fa5bb2)

The PDF report cover page

## The finding anatomy

Every finding follows the same anatomy, so a client reads each issue the same way:

> **Common information**
>
> Total risk, probability, criticality, the weakness class (CWE), the affected network or site, the CVSS score and vector, and the affected assets.

> **Description**
>
> What the issue is, in plain language.

> **Risks**
>
> What an attacker can do, the business impact, and the likelihood of exploitation.

> **Technical description**
>
> Root cause, how the weakness manifests, an evidence walkthrough, the affected components and assets, and the conditions and prerequisites.

> **Steps to reproduce**
>
> A prerequisites line, then numbered steps a reviewer can follow to see the issue.

> **Recommendations**
>
> Immediate actions, the configuration or code fix, hardening and defence in depth, compensating controls, references, and how to verify the fix.

> **Evidence**
>
> The captured request and response, in monospace, that proves the finding.

The report also carries a coverage page (the weakness classes checked) and a glossary (severity, probability, criticality, CVSS, CWE, KEV, EPSS, retest, out of scope), so a non-specialist reader can follow it.

> [!TIP]
>
> The [AI](/ai/local-ai.md) can draft these sections from the evidence and your house style, grounded in the project's real data, for you to review and accept. It never invents hosts, versions or payloads.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.