> For the complete documentation index, see [llms.txt](https://pnpt.adot8.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://pnpt.adot8.com/external-pentest-playbook/methodology/reviewing-and-extracting-information.md).

# Reviewing and Extracting Information

## Overview

Review vulnerabilities medium and above. Very common vulnerabilities are DNS or SSL self signed certificate related.

Export the **Nessus file** and create a **Executive Summary** and **Custom** (everything selected)  report as a PDF and HTML.

<figure><img src="/files/N5edK8ghYvEcQV6vH9I2" alt=""><figcaption><p>Nessus Example</p></figcaption></figure>

A XML report can also be generated to give to the client using[ this tool](http://www.melcara.com/) (or just search for nessus parser). The document is also useful for us by using the **portScanData section** and importing that data into our **checklist targets section**

```bash
perl parse_nessus_xml.v24.pl -f PNPT_mbpjyt.nessus
```

<figure><img src="/files/GNgEocU4jUJFidz4WESq" alt=""><figcaption><p>Parsed Nsssus scan Example</p></figcaption></figure>