Taking effective notes for CTF, OSCP and other labs 

Very glad you found the content useful! 🙏🏼

Thank you so much! Wish you the best, too!

🤩

Yeah, I feel the same way! There are great tools that allow you to do great things, but the same tools may not be the right choice for other kinds of things. In this case, certain tools that should be a support end up becoming the exact opposite, turning them into real limitations. I think choosing your toolset carefully is critical if you want to get the best out of the situation you face.

Thank you very much! Appreciate you enjoyed the editing ☺️

Glad to have been useful to you! Thank you very much for the kind words 🙏🏻 I made both the templates public, in case you might need them you can find both the links in the first pinned comment

Glad to hear it! 🙏🏻

Glad you enjoyed it!

💪🏻💪🏻💪🏻

Yeah, great change, you won't regret it ;)

Thanks a lot :)

Yeah that's a great idea! Maybe I'll do something outside of HTB, but I like the idea about taking notes live for a video. Thanks for the suggestion!

Many thanks! 🙏

When I did the OSCP I did not keep track of users through tags or special pages, I just used the search feature, but in hindsight I would definitely do it differently. I think using tags would be more than fine, alternatively you could create a folder containing all the users you find (like a dossier) and link them to their respective machines, but that seems a bit over-kill to me.

Hello Lian, thanks and glad to see you here! I only attended a technical high school computer science, never went to University/college. When I finished high school, I worked as a software developer for a couple of years, and in the meantime I continued to study and practice as a self-taught, until I was then hired as a junior penetration tester :)

It wasn't, but now I made it available as a template so that you can copy it :) Consider however that it is a bit outdated and I am no longer maintaining it because I went back to using Obsidian 👍🏻

Nowhere, I created it according to my needs

Yeah, I know, but tbh I don't think it's worth it. I'm having a good time using GitHub, actually :) But yes, Obsidian Sync it's definitely an option

Unfortunately it is only Free but not Open Source

Hey bro! No problem! Write me at 0xbro@proton.me or if you prefer on Telegram, write me at @MaOutis :) I will be happy to get in touch with you! Ci sentiamo!

@@0xbro great man 💪🏼

First of all, thanks! I published a sort of template representing how I generally organize my pentests's notes inside Obsidian. Basically I create folder for every net or subnet I have to test, then I create a single note for each machine I can identify. All the notes have the same structure: a high level summary, an information gathering section filled with the various scans I perform against the single IP, an enumeration section containing all the enumeration steps I conducted against the various services, the exploitation section containing all the vulnerabilities found, the various exploits and screenshots, a lateral movement section containing all the steps required to move to another user o machine, a privilege escalation section where I write all the enumeration steps and exploits required for the privesc and finally the Trophy & Loot section containing flags, credentials, restricted files, notes, ecc. When I see that two machines are connected (e.g. they have a dual network interface, or a service communicates with another machine, or even a note on the user's desktop suggests that there is a relationship with another PC), I simply create a link to the note dedicated to that other machine, so that the link can also be found within Obsidian's graph view.

🙏🏻🙏🏻🙏🏻

?

@@0xbro the name just made me chuckle