title: What does "assumptions" refer to when writing a pentest report?
body: <p>I have to write the <strong>&quot;assumptions&quot;</strong> part of a pentest report and I am having trouble understanding what I should write. I checked multiple pentest reports (from <a href="https://github.com/juliocesarfort/public-pentesting-reports" rel="nofollow noreferrer">https://github.com/juliocesarfort/public-pentesting-reports</a>) but none of them had this paragraph.<br> Also I found this explanation &quot;In case there are some assumptions that the pen-tester considers before or during the test, the assumptions need to be clearly shown in the report. Providing the assumption will help the report audiences to understand why penetration testing followed a specific direction.&quot;, but still what I do have in mind it is more suited for <strong>&quot;attack narative&quot;</strong>. <br>
  Can you provide me a small <strong>example</strong> (for one action, situation) so I can see exactly how it should be written?</p>