Output Structure
Each scan produces structured output inside the SCAN/ directory.
Directory Structure
code
SCAN/
└── targets/{domain}/
├── recon/
├── loot/
├── exploits/
├── reports/
│ └── report-YYYY-MM-DD.md
├── screenshots/
└── payloads/
Report Format
Reports use markdown format with the following structure:
- Executive Summary: High-level findings for management
- Scope: Target under scan
- Findings: List of findings with CVSS v3.1 scores
- Technical Details: Step-by-step reproduction steps
- Remediation: Fix guidance per finding
- Appendix: Additional technical details
Finding Scoring
Each finding is scored using CVSS v3.1:
| Severity | Score Range |
|---|---|
| Critical | 9.0 - 10.0 |
| High | 7.0 - 8.9 |
| Medium | 4.0 - 6.9 |
| Low | 0.1 - 3.9 |