Security-C4PO is an open-source web-application for managing and documenting penetration tests. This tool allows a security tester to keep track of the testing progress according to the OWASP Testing Guide. This application aims to make the offical Testing Guide more actionable to work with.
Go to file
Marcel Haag dee3c35180 feat: As a developer I want to upload my docker images to DockerHub 2023-08-11 14:18:56 +02:00
.github feat: As a developer I want to upload my docker images to DockerHub 2023-08-11 14:18:56 +02:00
security-c4po-angular feat: As a developer I want to upload my docker images to DockerHub 2023-08-11 14:18:56 +02:00
security-c4po-api feat: As a developer I want to upload my docker images to DockerHub 2023-08-11 14:18:56 +02:00
security-c4po-cfg feat: As a developer I want to upload my docker images to DockerHub 2023-08-11 14:18:56 +02:00
security-c4po-reporting feat: As a developer I want to upload my docker images to DockerHub 2023-08-11 14:18:56 +02:00
wiki feat: As a developer I want to upload my docker images to DockerHub 2023-08-11 14:18:56 +02:00
.gitignore feat: Updated README.md and wiki folder 2021-11-17 16:02:56 +01:00
CONTRIBUTING.md Update CONTRIBUTING.md 2022-08-19 13:14:59 +02:00
LICENSE.md Updated LICENSE.md 2022-08-19 13:14:59 +02:00
README.md feat: As a developer I want to upload my docker images to DockerHub 2023-08-11 14:18:56 +02:00
THIRD-PARTY-LICENSES.md Create THIRD-PARTY-LICENSES.md 2022-08-19 13:14:59 +02:00
c4po.sh feat: As a developer I want to upload my docker images to DockerHub 2023-08-11 14:18:56 +02:00

README.md

workflow_badge workflow_badge

alt architecture

Welcome to the frontend repository of Security C4PO, an open-source pentest reporting tool. Security C4PO is a powerful, user-friendly tool designed to simplify the process of generating professional pentest reports. It aims to streamline and automate the often time-consuming task of creating comprehensive reports by providing an intuitive web-based interface that facilitates the content of the OWASP TESTING GUIDE.

This repository contains the codebase of Security C4PO, built with an Angular Frontend and two Spring Boot Backend Microservices.

YouTube

Table of Contents

Application Architecture

alt architecture

Data Structure

alt datastructure

C4PO Roadmap

alt roadmap

Project

Angular RxJS Spring Gradle Docker MongoDB

Technical Requirements

  • Docker / Docker-compose
  • OpenJDK 11
  • Node 14.15.1 / npm 6.14.8
  • MongoDB 4.4.6

Tools

  • mongoDB Compass
  • Postman
  • Jaspersoft Studio

Conventions

  • Branch: <initial>_c4po_<issuenumber>
  • Commit: feat: <What was implemented?> or fix: <What got fixed?>

Development server

Execute 'c4po.sh' and all services will run on a dev server.

Testuser Credentials

  • Username: c4po
  • Password: Test1234!

Contributing

Contributions to Security C4PO are welcome! If you'd like to contribute to the project, please follow the guidelines outlined in the CONTRIBUTING.md file.

License

Security C4PO is licensed under the Apache License 2.0 License. Please see the LICENSE file for more information.

We hope you find Security C4PO useful for managing and generating pentest reports. If you encounter any issues or have suggestions for improvement, please feel free to create an issue on the issue tracker.