Ask HN: How do you take notes when you're Bug Hunting or Pentesting?
I'm working on a note-taking desktop application to help with keeping track of all your notes and findings.
https://bigtruck.io/atlas
What is your biggest problem when taking notes when you’re Bug Hunting or Pentesting?
Please let me know your feedback. Thanks.
12 comments
[ 3.0 ms ] story [ 37.1 ms ] threadMy biggest issue is that while I'm taking notes, I just want to write notes down quickly in one place without distracting me from the task, but when I get back to them, I want them neatly organized by date, client, part of project, etc.
Can you tell me more about 'organizing the notes by date, client, part of the project, etc'?
So I take your point, as we get closer to launch there will be more screens. With that said do you mind sharing how you take notes and what's the biggest pain for you?
Thanks again.
* Edit *
I also sent a tweet to @ZephrFish to get his input too :)
I think a huge pain point is timestamping notes. So you generally start a pentest and it would be helpful to add a timestamp at each place you take a note. If you could then export it as a timeline of when events occurred that'd be awesome. The reason why you want to see the timeline is so you can hand it to the blue team and be like this is when we were doing bad stuff.
I take notes with vim when programming, in this form with a text file. I write them my thoughts. I can search the file by date. I can search it by tag /#notes. It's simple works and the only challenge is that I can't add my doodle. If need be, I'll draw it out on piece of paper. I need to find a simple way to import it. If something simple I do stuff such as A<--->B---->C<----D