Files
rengine/reports/analysis
Yogesh OjhaandClaude Opus 5 28644ce808 fix(reports): a report on a private network said its services faced the internet
Three narratives and the services lede were written for an internet-
facing estate and stated it as fact. A report on 192.168.0.0/24 led with
"Administrative and data services are reachable from the internet" and
described the NAS and the router as services "of a kind that normally
sits on a private network" — which is where they were. A deliverable
that misstates where a service is reachable from is not usable evidence.

The vantage is now read off the addresses that answered, once, on the
report source: an estate whose every address is private was reached from
inside, and the attack paths, the executive summary and the services
section all say so.

The opening sentence also lowercased the dimension labels, so it read
"the run produced web assets, endpoints, services and ips". It uses the
prose nouns the surface vocabulary already carries.

A telnet port answers with protocol negotiation and no text, and every
unprintable byte was rendered as a dot, so the banner stored for it was
twelve dots — printed in the report under "Software". A response with no
readable character is no longer recorded as a banner.

The CDN coverage note printed on scans with no CDN address.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01K6LcH8uUddjJbKrahf34ys
2026-09-06 22:38:54 +05:30
..