Report Types

Introduction to the built-in report types

Introducing the Report Types

Ghostwriter supports a variety of report types:

  • JSON

  • Word docx

  • Excel xlsx

  • PowerPoint pptx

JSON

The JSON output is behind every other report type. It is surfaced as a report type to enable users to take it and create custom reports and visualizations.

Example Report JSON
{
"client": {
"id": 1,
"full_name": "Kabletown",
"short_name": "KT",
"codename": "SCHEMING RANGER",
"poc": {
"1": {
"id": 1,
"name": "John Francis Donaghy",
"job_title": "Vice President of East Coast Television and Microwave Oven Programming",
"email": "jack@nbc.com",
"phone": "555-123-4556",
"note": "Goes by \"Jack.\""
},
}
},
"project": {
"id": 1,
"name": "Kabletown Penetration Test (GREATER THUNDER)",
"start_date": "2019-07-29",
"end_date": "2019-08-09",
"codename": "GREATER THUNDER",
"project_type": "Penetration Test",
"note": ""
},
"findings": {
"SMBv1 Remote Code Execution (CVE-2017-0143)": {
"id": 1,
"title": "SMBv1 Remote Code Execution (CVE-2017-0143)",
"severity": "High",
"affected_entities": "...",
"description": "...",
"impact": "...",
"recommendation": "...",
"replication_steps": "...",
"host_detection_techniques": "...",
"network_detection_techniques": "...",
"references": "...",
"evidence": {
"Enigma": {
"id": 5,
"friendly_name": "Enigma",
"uploaded_by": "admin",
"upload_date": "2019-08-04",
"description": "Captured while he was discovering a new 0-day, probably.",
"caption": "Matt Nelson, OSCP in the zone",
"url": "/media/evidence/1/matt_nelson.png",
"file_path": "evidence/1/matt_nelson.png"
}
}
},
},
"infrastructure": {
"domains": {
"1": {
"id": 1,
"name": "getghostwriter.io",
"activity": "Command and Control",
"operator": "admin",
"start_date": "2019-07-15",
"end_date": "2019-08-09",
"note": "Used with Covenant C2."
}
},
"servers": {
"static": {
"1": {
"id": 1,
"ip_address": "159.89.234.80",
"activity": "Command and Control",
"role": "Team Server / C2 Server",
"operator": "benny",
"start_date": "2019-07-29",
"end_date": "2019-08-09",
"note": "Used for Covenant C2."
}
},
"cloud": {
"1": {
"id": 1,
"ip_address": "255.255.255.123",
"activity": "Phishing",
"role": "SMTP",
"operator": "benny",
"note": ""
},
},
},
"domains_and_servers": {
"1": {
"domain": "code.getghostwriter.io",
"servers": "255.255.255.123",
"cdn_endpoint": "ghost-cdn.azureedge.net"
},
}
},
"team": {
"1": {
"id": 1,
"name": "Benny Ghostwriter",
"project_role": "Assessment Lead",
"email": "benny@ghostwriter.wiki",
"start_date": "2019-07-29",
"end_date": "2019-08-09",
"note": "..."
},
}
}

Read on to learn more about the template files for the Word and PowerPoint reports in the Customizing Reports section.

Word Document

The Word output produces a report.docx file with the JSON data formatted into tables and text using styles stored in your template.docx file.

Example Table from the Word Output

PowerPoint Slide Deck

The PowerPoint output produces a report.pptx file with the JSON data formatted into a skeleton slide deck with your findings/observations, client information, and company information. The slide styles are stored in your template.pptx file.

Example Slide from the PowerPoint Output

Excel Spreadsheet

The Excel output produces a report.xlsx file with the JSON data formatted into a spreadsheet.

Example Cells from the Excel Output