Penetration Testing Findings Repository by Cybersecurity and Infrastructure Security Agency

The repository consists of three layers:

1. Finding Category layer lists the overarching categories
2. General Finding layer lists high-level findings
3. Specific Finding layer lists low-level findings

Just an overview of the general findings

More: https://cmu-sei-podcasts.libsyn.com/a-penetration-testing-findings-repository