Lion Cipher Lab
Aggregate findings into attack-path risk in a pentest report
- Penetration Testing / Red Team
- Intermediate
- ~45 min
- Free · no account required
Why it matters
The most common failure in a penetration test report is not a missed vulnerability — it is a report that lists each finding in isolation and scores it on its own. A client reads a page of Mediums and a page of Lows, sees nothing marked Critical, and deprioritizes the lot. But attackers do not use findings one at a time; they chain them. A medium-severity server-side request forgery gets them onto the internal network, default credentials on an internal panel get them a foothold, and a world-readable config file hands them the database password. Each step is a Medium or a Low. The end state is…
What you'll learn
- recording a finding's precondition and what it yields
- chaining findings into attack paths by reachability
- showing why chained Mediums can be a Critical
- finding the choke-point finding that breaks multiple paths
- distinguishing path risk from isolated severity
- the limits of a reachability model
Steps in this lab
- Why a list of Mediums can be a Critical
- The findings with preconditions
- Write the reachability analysis
- Run it: two crown jewels from Mediums
- Report the path, fix the choke point, and the caveats