Taking effective notes for CTF, OSCP and other labs
Vložit
- čas přidán 6. 07. 2024
- Having excellent and well-organized notes is a lifesaver during the @OffSecTraining's OSCP preparation and exam, but also during CTFs, allowing you to identify vulnerabilities already exploited in the past and also to map how machines are interconnected with each other within the network. In this video, I will show you how I take practical notes using Obsidian and Notion and how I organize them.
=== Timestamp ===
00:00 - Intro
01:11 - Which software do I use
02:02 - The reason why I don't use the usually suggested programs
02:56 - Useful features of Obsidian
03:25 - My note-taking template for CTF or pentests
04:38 - The real strength of Obsidian: the graph view
05:32 - Obsidian's limitations
06:30 - Migration to Notion
06:51 - Notion's databases and filters
07:25 - Other useful features of Notion
07:54 - Summarizing
08:13 - Conclusions
If you enjoyed the video leave a like and subscribe to my channel!
For writeups in text format or other articles related to Ethical Hacking go to my blog: maoutis.github.io/
---
Would you like to support my work? Offer me a virtual coffee :)
www.buymeacoffee.com/0xbro
Check out my socials:
Twitter: / 0xbro1
Linkedin: / mattia-0xbro-brollo-b4...
#notetaking #ctf #oscp #obsidian #notion - Věda a technologie
Download the template for Notion here: 0xbro.notion.site/d25f47351476412f94dc38201be0c72e?v=e1bd4fbb05ea465ea558d1be825ac9d4
Download the template for Obsidian here: drive.google.com/file/d/1Fo_h5jLO3QDpzaOsfxx6TvgbGeaHYl1G/view?usp=sharing
This is the exact issue that I am currently struggling with. Your video is the only one out there that helped me with my problem. Thanks a lot for making such a unique content.
Very glad you found the content useful! 🙏🏼
Super helpful. Thank you for the recommendation and best of luck in your endeavors!
Thank you so much! Wish you the best, too!
Thanks for this vlog mate this are really helpful.
Our ability to make sense of the world is highly limited to what we can write and how clearly we can express ourselves. And this, in my opinion, applies to everything, from intimate relationships to highly technical endeavors, such as penetration testing.
Yet, not much attention goes to note taking tools, and what kind of features a note taking tool should offer the user.
Thank you for the refreshing video!
Yeah, I feel the same way! There are great tools that allow you to do great things, but the same tools may not be the right choice for other kinds of things. In this case, certain tools that should be a support end up becoming the exact opposite, turning them into real limitations.
I think choosing your toolset carefully is critical if you want to get the best out of the situation you face.
This is Gold. Very Informative
Thank You.
🤩
Bro you really are my Brother now thank you so much!
Mitico!!! Keep up! Love the video editing ;)
Thank you very much! Appreciate you enjoyed the editing ☺️
OMG. Buddy. I found this video useful. And the blog website and notion link you shared. Damn this is useful and well organized.
I am grateful I found your work. Keep it up. Really man. (:
Glad to have been useful to you! Thank you very much for the kind words 🙏🏻
I made both the templates public, in case you might need them you can find both the links in the first pinned comment
Thanks man it's really helpful video
Unique and useful contact. Thanks bro
Glad to hear it! 🙏🏻
Thanks man it's really helpful video!
Glad you enjoyed it!
Amazing!! Thanks dude!
💪🏻💪🏻💪🏻
Hey brotha I’m just getting this video now and I love everything u said here! I’ve been using cherrytree but I will be moving to obsidian today!
Yeah, great change, you won't regret it ;)
Great video btw!
Thanks a lot :)
Yeah thanks
Thanks for the video and sharing your template. I am able to sync my obsidian Vault with my github. syncing every minute
Just learned about Obsidian and immediately had the idea to try out the graph for the OSCP course. Still trying to figure out how best to structure the notes so I can get a useful graph.
Are you using tags like for the found users? To be able to show them on the graph
When I did the OSCP I did not keep track of users through tags or special pages, I just used the search feature, but in hindsight I would definitely do it differently. I think using tags would be more than fine, alternatively you could create a folder containing all the users you find (like a dossier) and link them to their respective machines, but that seems a bit over-kill to me.
Nice video bro
Many thanks! 🙏
hello, love ur videos, I'm starting to get passionate about IT security and I would like to deepen, in the meantime I'm reading books, following forums about it and doing some experiments with vms (not with great success :P). Could I ask what course of study did you follow?
Hello Lian, thanks and glad to see you here! I only attended a technical high school computer science, never went to University/college. When I finished high school, I worked as a software developer for a couple of years, and in the meantime I continued to study and practice as a self-taught, until I was then hired as a junior penetration tester :)
Hey, can you do a walk through of a htb box with emphasis of taking notes? That would be good for us learners as we would know how to structure our notes, maybe try the forest box from htb
Yeah that's a great idea! Maybe I'll do something outside of HTB, but I like the idea about taking notes live for a video. Thanks for the suggestion!
Is it possible to clone your practical tools list ?
It wasn't, but now I made it available as a template so that you can copy it :) Consider however that it is a bit outdated and I am no longer maintaining it because I went back to using Obsidian 👍🏻
It is possible to sync Obsidian vaults/notes across devices for $8 per month.
Yeah, I know, but tbh I don't think it's worth it. I'm having a good time using GitHub, actually :) But yes, Obsidian Sync it's definitely an option
where did you get your template
Nowhere, I created it according to my needs
Obsidian is FOSS?
Unfortunately it is only Free but not Open Source
Congratulations on your videos are fantastic, I'm a guy from Milan who has always been passionate about the IT world and computer security, it has always been my passion, but as often happens in life one understands it late ... I do a totally different job but I would really like to change my life, while I work I'm trying to study independently, to become a penetration tester, I have a general smattering but I can ask you for your email, I wish I could compare myself with you on many things ... I hope you will answer me .. continue so you are great
Hey bro! No problem! Write me at 0xbro@proton.me or if you prefer on Telegram, write me at @MaOutis :) I will be happy to get in touch with you! Ci sentiamo!
@@0xbro great man 💪🏼
Very informative video, however I felt as through you went through the structure/format of your notes too quickly. Looking at a good example of how you organize everything would be incredibly helpful
First of all, thanks! I published a sort of template representing how I generally organize my pentests's notes inside Obsidian.
Basically I create folder for every net or subnet I have to test, then I create a single note for each machine I can identify. All the notes have the same structure: a high level summary, an information gathering section filled with the various scans I perform against the single IP, an enumeration section containing all the enumeration steps I conducted against the various services, the exploitation section containing all the vulnerabilities found, the various exploits and screenshots, a lateral movement section containing all the steps required to move to another user o machine, a privilege escalation section where I write all the enumeration steps and exploits required for the privesc and finally the Trophy & Loot section containing flags, credentials, restricted files, notes, ecc.
When I see that two machines are connected (e.g. they have a dual network interface, or a service communicates with another machine, or even a note on the user's desktop suggests that there is a relationship with another PC), I simply create a link to the note dedicated to that other machine, so that the link can also be found within Obsidian's graph view.
Sup
🙏🏻🙏🏻🙏🏻
0xbro xD
?
@@0xbro the name just made me chuckle