Note Keeping / Reporting / Admin Stuff

Bypass Medium Paywall

https://freedium.cfd/https://medium.com/url

Clone website - Local version

On ubuntu

Install httrack: http://www.httrack.com/page/2/

sudo apt install httrack

Download all website pages

httrack "https://0xss0rz.gitbook.io" -O "./my_gitbook_local"

Web server

cd my_gitbook_local
sudo python3 -m http.server 8000

When you get a 404 error, add .html at the end of the URL.

Start the web server from: ~/Desktop/my_gitbook_local/0xss0rz.gitbook.io

DocuSeal - Alternative to DocuSign

DocuSeal | Open Source Document SigningDocuSeal

Perform various operations on PDF files - Locally hosted

GitHub - Stirling-Tools/Stirling-PDF: #1 Locally hosted web application that allows you to perform various operations on PDF filesGitHub

Pentest Contracts

GitHub - cure53/Contracts: A small collection of potentially useful contract templatesGitHub

Markedown Editors

Joplin websitejoplinapp

Obsidian: A knowledge base that works on local Markdown files.obsdmd

🔮 Obsidian cheat sheet and some useful shortcut keysObsidian-Cheat-Sheet

Knowledge Management

GitHub - siyuan-note/siyuan: A privacy-first, self-hosted, fully open source personal knowledge management software, written in typescript and golang.GitHub

Create Visuals

Napkin AI - The visual AI for business storytellingNapkin AI

Image of Code

Carboncarbon_app

Note Keeping - Example

External Penetration Test - <Client Name>

• Scope (including in-scope IP addresses/ranges, URLs, any fragile hosts, testing timeframes, and any limitations or other relative information we need handy)

• Client Points of Contact

• Credentials

• Discovery/Enumeration

  • Scans

  • Live hosts

• Application Discovery

  • Scans

  • Interesting/Notable Hosts

• Exploitation

  • <Hostname or IP>

  • <Hostname or IP>

• Post-Exploitation

  • <Hostname or IP>

  • <<Hostname or IP>

Organizing your Recon

Hacker tools: BBRF - organizing your reconIntigriti

How to Write a Pentest Report

Templates of vulnerability reports

GitHub - LuemmelSec/PwnDoc-VulnsGitHub

xanhacks / Web Pentest Reports · GitLabGitLab

GitHub - pdelteil/BugBountyReportTemplates: List of reporting templates I have used since I started doing BBH.GitHub

Vulnerability Rating taxonomy

Bugcrowd’s Vulnerability Rating Taxonomy - Bugcrowd

Type of attacks - web vulnerabilities

Red Team Templates

Red Team Development and Operations

Red Team Development and Operations

Anonymized Internal Pentest Report

https://super.underdefense.com/hubfs/[Anonymized]%20Internal%20Pentest%20Report%202023.pdf

SysReportor

GitHub - Syslifters/HackTheBox-Reporting: Hack The Box CPTS, CBBH Exam and Lab Reporting / Note-Taking ToolGitHub

Docx Template

Discord - A New Way to Chat with Friends & CommunitiesDiscord

---

Pwndoc-ng

GitHub - pwndoc-ng/pwndoc-ng: Pentest Report GeneratorGitHub

Faction

GitHub - factionsecurity/faction: Pen Test Report Generation and Assessment CollaborationGitHub

Faction Docs

How to Automate Pentest Reporting Using FactionMedium