https://github.com/rsrdesarrollo/sarna

Security Assessment Report geNerated Automatically
https://github.com/rsrdesarrollo/sarna

docx docx-generator markdown markdown-to-docx report reporting security security-tools

Last synced: 3 months ago
JSON representation

Security Assessment Report geNerated Automatically

• Host: GitHub
• URL: https://github.com/rsrdesarrollo/sarna
• Owner: rsrdesarrollo
• License: mit
• Created: 2018-05-26T22:11:24.000Z (over 6 years ago)
• Default Branch: master
• Last Pushed: 2024-02-08T09:29:56.000Z (9 months ago)
• Last Synced: 2024-06-06T22:48:10.443Z (5 months ago)
• Topics: docx, docx-generator, markdown, markdown-to-docx, report, reporting, security, security-tools
• Language: Python
• Size: 2.8 MB
• Stars: 40
• Watchers: 5
• Forks: 17
• Open Issues: 14
• Metadata Files:
  • Readme: README.md
  • Funding: .github/FUNDING.yml
  • License: LICENSE

Awesome Lists containing this project

• awesome-hacking-lists - rsrdesarrollo/sarna - Security Assessment Report geNerated Automatically (Python)

README

        


    



 Security Assessment Report geNerated Automatically 


## What is SARNA?

Well, the name is clear, SARNA is a tool to generate security assessment reports automatically in DOCX format.

It aims to solve a problem I have been having. As a pentester everybody knows that writing reports sucks, and

at the end you spend a lot of time copy pasting things from other reports (like definitions or other things),

and if, for some reason, you have to do your reports in DOCX, there is no easy way to automatize that.

SARNA is a **collaborative platform** that let a group of pentesters to work together to make a great report.

You have to concentrate in hacking and breaking things, and hopefully, **SARNA will do de boring part of the report**.

### Why the name

Sarna is the Spanish name for Scabies. In Spain we have a saying "sarna con gusto no pica" in english is something 

like "Scabies with pleasure does not itch". It is a little bit disgusting, but at the end, it means that if you have

something bad (like having to make a report), but you get something good with it in exchange (like doing it 

fast with this tool), it is not that bad at the end. 

### Run test environment

To run a simple test environment in order to check what is SARNA yo can use the docker-compose recipe

**PLEASE DO NOT USE DOCKER-COMPOSE RECIPE FOR PRODUCTION WITHOUT CHANGING PASSWORDS AND SECRETS**

```bash

docker-compose up

```

This will take a while for the first time. At the end of the process your SARNA Server should 

be running at 

You only need to create a new user

```bash

docker-compose exec sarna /bin/sh

flask user add -r manager 

```

Please referer to `flask user add --help` for more info.