The Toolkit
Reporting Tools
The engagement isn’t finished until it’s written up. Reporting is where findings become a deliverable someone can act on, and it’s the phase that separates a professional assessment from a pile of tool output. These tools cover the practical side: keeping structured notes as you work, capturing screenshots of web targets at scale, snapping page images for evidence, and organizing findings across a whole team.
| Tool | Source | What it’s for |
|---|---|---|
| cherrytree | AUR | A hierarchical notebook for engagement notes, structured and searchable. |
| eyewitness | AUR | Screenshot web services at scale and build a browsable report. |
| faraday | AUR | A collaborative platform for aggregating and managing findings. |
| cutycapt | AUR | Capture a web page as an image from the command line. |
All live under Security → Reporting Tools. For hosting a report or a phishing page, see Running Services.