Taking effective notes for CTF, OSCP and other labs

[@0xbro]

Download the template for Notion here: 0xbro.notion.site/d25f47351476412f94dc38201be0c72e?v=e1bd4fbb05ea465ea558d1be825ac9d4 Download the template for Obsidian here: drive.google.com/file/d/1Fo_h5jLO3QDpzaOsfxx6TvgbGeaHYl1G/view?usp=sharing

[@architvats2633]

This is the exact issue that I am currently struggling with. Your video is the only one out there that helped me with my problem. Thanks a lot for making such a unique content.

[@0xbro]

Very glad you found the content useful! 🙏🏼

[@jacklee1612]

First of all, big congrats to you for passing your OSCP! And thank s for uploading this very informative video. Thanks buddy! ☺

[@esadecimale]

Our ability to make sense of the world is highly limited to what we can write and how clearly we can express ourselves. And this, in my opinion, applies to everything, from intimate relationships to highly technical endeavors, such as penetration testing. Yet, not much attention goes to note taking tools, and what kind of features a note taking tool should offer the user. Thank you for the refreshing video!

[@0xbro]

Yeah, I feel the same way! There are great tools that allow you to do great things, but the same tools may not be the right choice for other kinds of things. In this case, certain tools that should be a support end up becoming the exact opposite, turning them into real limitations. I think choosing your toolset carefully is critical if you want to get the best out of the situation you face.

[@err_0-5rZ]

Bro you really are my Brother now thank you so much!

[@markanthonyagudo5688]

Thanks for this vlog mate this are really helpful.

[@iakashx]

OMG. Buddy. I found this video useful. And the blog website and notion link you shared. Damn this is useful and well organized. I am grateful I found your work. Keep it up. Really man. (:

[@0xbro]

Glad to have been useful to you! Thank you very much for the kind words 🙏🏻 I made both the templates public, in case you might need them you can find both the links in the first pinned comment

[@jasonirvin6782]

Hey brotha I’m just getting this video now and I love everything u said here! I’ve been using cherrytree but I will be moving to obsidian today!

[@0xbro]

Yeah, great change, you won't regret it ;)

[@DividedWarrior]

Super helpful. Thank you for the recommendation and best of luck in your endeavors!

[@0xbro]

Thank you so much! Wish you the best, too!

[@sampsonakpomiomio4999]

This is Gold. Very Informative Thank You.

[@0xbro]

🤩

[@imuadh2342]

Unique and useful contact. Thanks bro

[@0xbro]

Glad to hear it! 🙏🏻

[@MHamidAshraf]

Thanks for the video and sharing your template. I am able to sync my obsidian Vault with my github. syncing every minute

[@AlexElement]

Mitico!!! Keep up! Love the video editing ;)

[@0xbro]

Thank you very much! Appreciate you enjoyed the editing ☺️

[@shledakayn1486]

Thanks man it's really helpful video!

[@0xbro]

Glad you enjoyed it!

[@muhammedalzureedi9588]

Thanks man it's really helpful video

[@atomcrypto3764]

Hey, can you do a walk through of a htb box with emphasis of taking notes? That would be good for us learners as we would know how to structure our notes, maybe try the forest box from htb

[@0xbro]

Yeah that's a great idea! Maybe I'll do something outside of HTB, but I like the idea about taking notes live for a video. Thanks for the suggestion!

[@Martijn58]

Great video btw!

[@0xbro]

Thanks a lot :)

[@R4z0r_arg]

Amazing!! Thanks dude!

[@0xbro]

💪🏻💪🏻💪🏻

[@pablochiquis8161]

Nice video bro

[@0xbro]

Many thanks! 🙏

[@tyler4723]

Just learned about Obsidian and immediately had the idea to try out the graph for the OSCP course. Still trying to figure out how best to structure the notes so I can get a useful graph. Are you using tags like for the found users? To be able to show them on the graph

[@0xbro]

When I did the OSCP I did not keep track of users through tags or special pages, I just used the search feature, but in hindsight I would definitely do it differently. I think using tags would be more than fine, alternatively you could create a folder containing all the users you find (like a dossier) and link them to their respective machines, but that seems a bit over-kill to me.

[@nex7053]

Im using git + obsidian. No struggles and i do not have to depend with my data on third party server.

[@0xbro]

yeah, I ended up opting for the same solution too!

[@GilligansTravels]

Yeah thanks

[@thavrisco1632]

It is possible to sync Obsidian vaults/notes across devices for $8 per month.

[@0xbro]

Yeah, I know, but tbh I don't think it's worth it. I'm having a good time using GitHub, actually :) But yes, Obsidian Sync it's definitely an option

[@Martijn58]

Is it possible to clone your practical tools list ?

[@0xbro]

It wasn't, but now I made it available as a template so that you can copy it :) Consider however that it is a bit outdated and I am no longer maintaining it because I went back to using Obsidian 👍🏻

[@louissaintherold807]

where did you get your template

[@0xbro]

Nowhere, I created it according to my needs

[@Lian00]

hello, love ur videos, I'm starting to get passionate about IT security and I would like to deepen, in the meantime I'm reading books, following forums about it and doing some experiments with vms (not with great success :P). Could I ask what course of study did you follow?

[@0xbro]

Hello Lian, thanks and glad to see you here! I only attended a technical high school computer science, never went to University/college. When I finished high school, I worked as a software developer for a couple of years, and in the meantime I continued to study and practice as a self-taught, until I was then hired as a junior penetration tester :)

[@Luke-ii9wp]

Obsidian is FOSS?

[@0xbro]

Unfortunately it is only Free but not Open Source

[@alessandronotoladiegai6760]

Congratulations on your videos are fantastic, I'm a guy from Milan who has always been passionate about the IT world and computer security, it has always been my passion, but as often happens in life one understands it late ... I do a totally different job but I would really like to change my life, while I work I'm trying to study independently, to become a penetration tester, I have a general smattering but I can ask you for your email, I wish I could compare myself with you on many things ... I hope you will answer me .. continue so you are great

[@0xbro]

Hey bro! No problem! Write me at [e-mail] or if you prefer on Telegram, write me at @MaOutis :) I will be happy to get in touch with you! Ci sentiamo!

[@alessandronotoladiegai6760]

@@0xbro great man 💪🏼

[@xenmode7580]

Very informative video, however I felt as through you went through the structure/format of your notes too quickly. Looking at a good example of how you organize everything would be incredibly helpful

[@0xbro]

First of all, thanks! I published a sort of template representing how I generally organize my pentests's notes inside Obsidian. Basically I create folder for every net or subnet I have to test, then I create a single note for each machine I can identify. All the notes have the same structure: a high level summary, an information gathering section filled with the various scans I perform against the single IP, an enumeration section containing all the enumeration steps I conducted against the various services, the exploitation section containing all the vulnerabilities found, the various exploits and screenshots, a lateral movement section containing all the steps required to move to another user o machine, a privilege escalation section where I write all the enumeration steps and exploits required for the privesc and finally the Trophy & Loot section containing flags, credentials, restricted files, notes, ecc. When I see that two machines are connected (e.g. they have a dual network interface, or a service communicates with another machine, or even a note on the user's desktop suggests that there is a relationship with another PC), I simply create a link to the note dedicated to that other machine, so that the link can also be found within Obsidian's graph view.

[@BbY1231]

Sup

[@0xbro]

🙏🏻🙏🏻🙏🏻