Content Library

Content Library

The Content Library provides a centralized repository of vulnerability knowledge and reusable finding templates. Use it to maintain consistency across assessments and accelerate finding documentation.

Overview

The Content Library contains two main components:

1. NEURO Library - Curated vulnerability database
2. Custom Findings - Your organization’s templates

NEURO Library

The NEURO Library is a professionally curated database of common vulnerabilities with:

• Technical descriptions
• Impact statements
• Remediation guidance
• CVSS scoring
• References

Browsing the Library

1. Navigate to Content Library → NEURO Library
2. Browse by category or search
3. Click a vulnerability to view details

Categories

Category	Examples
Injection	SQL Injection, Command Injection, LDAP Injection
Authentication	Weak passwords, Missing MFA, Session issues
Access Control	IDOR, Privilege escalation, Missing authorization
Cryptography	Weak algorithms, Missing encryption, Certificate issues
Configuration	Default credentials, Verbose errors, Missing headers
Network	Open ports, Weak protocols, Missing segmentation
Web Application	XSS, CSRF, Security headers
Mobile	Insecure storage, Certificate pinning

Search Features

Search the library by:

• Vulnerability name
• CVE ID
• CWE ID
• Keyword
• Severity level

Using Library Entries

To use a library entry in your project:

1. Find the vulnerability
2. Click Use in Project
3. Select target project
4. Customize for your specific finding:
   • Add evidence
   • Specify affected assets
   • Adjust severity if needed
   • Add context-specific details
5. Save as project finding

Custom Findings Library

Create reusable templates for vulnerabilities specific to your organization.

Benefits

• Consistency - Same quality across all assessments
• Speed - Start from templates, not blank
• Accuracy - Pre-validated technical content
• Compliance - Include required fields

Creating Custom Templates

1. Navigate to Content Library → Custom Findings
2. Click + New Template
3. Complete the template form:

Template Fields

Field	Description
Title	Template name
Category	Vulnerability category
Default Severity	Suggested severity
Description	Generic technical description
Impact	Standard impact statement
Remediation	Fix recommendations
References	Helpful links
Tags	Organizing tags

4. Click Save Template

AI-Assisted Templates

Use AI to generate template content:

1. Click + New Template
2. Enter the vulnerability title
3. Click Generate with AI
4. Review generated content:
   • Technical description
   • Impact
   • Remediation
   • References
5. Edit as needed
6. Save template

Managing Templates

Edit Template

1. Click on template
2. Click Edit
3. Modify fields
4. Save changes

Clone Template

1. Click Clone
2. Modify the copy
3. Save as new template

Delete Template

1. Select template(s)
2. Click Delete
3. Confirm deletion

Note

Deleting a template does not affect findings that were created from it.

Template Organization

Categories

Organize templates by category:

• Web Application
• Network
• Mobile
• Cloud
• Physical
• Social Engineering

Tags

Add tags for filtering:

• OWASP Top 10
• CIS Controls
• PCI-DSS
• Quick Win
• Custom tags

Using Custom Templates

1. Open a project’s Findings tab
2. Click + New Finding → From Template
3. Search or browse templates
4. Select template
5. Customize for your finding:
   • Add specific evidence
   • Link affected assets
   • Adjust details
6. Save finding

Template Best Practices

Writing Effective Descriptions

Do:

• Use clear, technical language
• Explain the vulnerability mechanism
• Include generic examples
• Reference standards (OWASP, CWE)

Don’t:

• Include client-specific details
• Reference specific tools/versions
• Use overly complex jargon
• Leave placeholders in final version

Remediation Guidance

Structure remediations clearly:

### Short-term
- Immediate mitigation steps

### Long-term
- Permanent fix recommendations

### Verification
- How to confirm the fix worked

Severity Guidelines

Set appropriate default severities:

Severity	When to Use
Critical	Direct RCE, Auth bypass, Data breach
High	Significant data access, Privilege escalation
Medium	Limited data exposure, Requires conditions
Low	Minimal impact, Difficult to exploit
Info	Best practice, Hardening recommendation

Importing Templates

CSV Import

1. Click Import → CSV
2. Download template CSV
3. Fill in your templates
4. Upload and map fields
5. Import templates

From Other Projects

Copy findings as templates:

1. Open a project finding
2. Click Save as Template
3. Edit template details
4. Save to library

Exporting Templates

Export to CSV

1. Select templates
2. Click Export → CSV
3. Download file

Share Templates

Export templates for team sharing:

1. Select templates
2. Click Export → Package
3. Share the file
4. Others can import the package

Library Statistics

View usage statistics:

• Most used templates
• Recently created
• Template by category
• Usage trends

Access via Content Library → Statistics

---

Next: Learn about the Project Tracker