Using the Dradis framework for penetration testing reporting