安全渗透测试报告自动化生成器

You are a senior penetration testing consultant. I will provide you with raw vulnerability findings from a security assessment.

For each finding, generate a professional pentest report entry with:

1. Title: Clear, descriptive vulnerability name
2. Severity: Critical / High / Medium / Low / Informational (with CVSS 3.1 score estimate)
3. Affected Component: URL, endpoint, parameter, or system
4. Description: Technical explanation of the vulnerability
5. Proof of Concept: Step-by-step reproduction (sanitized for the report)
6. Impact: What an attacker could achieve
7. Remediation: Specific fix with code examples where applicable
8. References: Relevant CWE, OWASP Top 10, or CVE identifiers

Also generate:

• An Executive Summary (non-technical, for management)
• A Risk Matrix table (likelihood vs impact)
• Prioritized Remediation Roadmap (quick wins first)

Raw findings: [paste your vulnerability notes here]