Taking effective notes for CTF, OSCP and other labs

แชร์
ฝัง
  • เผยแพร่เมื่อ 5 ก.พ. 2025

ความคิดเห็น • 59

  • @0xbro
    @0xbro  2 ปีที่แล้ว +27

    Download the template for Notion here: 0xbro.notion.site/d25f47351476412f94dc38201be0c72e?v=e1bd4fbb05ea465ea558d1be825ac9d4
    Download the template for Obsidian here: drive.google.com/file/d/1Fo_h5jLO3QDpzaOsfxx6TvgbGeaHYl1G/view?usp=sharing

  • @architvats2633
    @architvats2633 2 ปีที่แล้ว +17

    This is the exact issue that I am currently struggling with. Your video is the only one out there that helped me with my problem. Thanks a lot for making such a unique content.

    • @0xbro
      @0xbro  2 ปีที่แล้ว

      Very glad you found the content useful! 🙏🏼

  • @jacklee1612
    @jacklee1612 4 หลายเดือนก่อน +1

    First of all, big congrats to you for passing your OSCP! And thank
    s for uploading this very informative video. Thanks buddy! ☺

  • @varuntech5690
    @varuntech5690 หลายเดือนก่อน +3

    First of all, congratulations!
    If sync is the only problem you have, then use obsidian with dropbox. You can sync on the android/desktop easily without paying anything.

    • @0xbro
      @0xbro  หลายเดือนก่อน +1

      Hey man, thanks for the feedback! I ended up using git and a private repo, but I'll take your suggestion into account if I ever need to dynamically synchronise my notes

  • @iakashx
    @iakashx 2 ปีที่แล้ว +3

    OMG. Buddy. I found this video useful. And the blog website and notion link you shared. Damn this is useful and well organized.
    I am grateful I found your work. Keep it up. Really man. (:

    • @0xbro
      @0xbro  2 ปีที่แล้ว +1

      Glad to have been useful to you! Thank you very much for the kind words 🙏🏻
      I made both the templates public, in case you might need them you can find both the links in the first pinned comment

  • @err_0-5rZ
    @err_0-5rZ ปีที่แล้ว +1

    Bro you really are my Brother now thank you so much!

  • @esadecimale
    @esadecimale 2 ปีที่แล้ว +3

    Our ability to make sense of the world is highly limited to what we can write and how clearly we can express ourselves. And this, in my opinion, applies to everything, from intimate relationships to highly technical endeavors, such as penetration testing.
    Yet, not much attention goes to note taking tools, and what kind of features a note taking tool should offer the user.
    Thank you for the refreshing video!

    • @0xbro
      @0xbro  2 ปีที่แล้ว +1

      Yeah, I feel the same way! There are great tools that allow you to do great things, but the same tools may not be the right choice for other kinds of things. In this case, certain tools that should be a support end up becoming the exact opposite, turning them into real limitations.
      I think choosing your toolset carefully is critical if you want to get the best out of the situation you face.

  • @DividedWarrior
    @DividedWarrior 2 ปีที่แล้ว +2

    Super helpful. Thank you for the recommendation and best of luck in your endeavors!

    • @0xbro
      @0xbro  2 ปีที่แล้ว

      Thank you so much! Wish you the best, too!

  • @markanthonyagudo5688
    @markanthonyagudo5688 11 หลายเดือนก่อน +1

    Thanks for this vlog mate this are really helpful.

  • @jasonirvin6782
    @jasonirvin6782 ปีที่แล้ว +1

    Hey brotha I’m just getting this video now and I love everything u said here! I’ve been using cherrytree but I will be moving to obsidian today!

    • @0xbro
      @0xbro  ปีที่แล้ว

      Yeah, great change, you won't regret it ;)

  • @AlexElement
    @AlexElement 2 ปีที่แล้ว +2

    Mitico!!! Keep up! Love the video editing ;)

    • @0xbro
      @0xbro  2 ปีที่แล้ว +1

      Thank you very much! Appreciate you enjoyed the editing ☺️

  • @imuadh2342
    @imuadh2342 2 ปีที่แล้ว +1

    Unique and useful contact. Thanks bro

    • @0xbro
      @0xbro  2 ปีที่แล้ว

      Glad to hear it! 🙏🏻

  • @sampsonakpomiomio4999
    @sampsonakpomiomio4999 2 ปีที่แล้ว +1

    This is Gold. Very Informative
    Thank You.

    • @0xbro
      @0xbro  2 ปีที่แล้ว

      🤩

  • @atomcrypto3764
    @atomcrypto3764 ปีที่แล้ว +4

    Hey, can you do a walk through of a htb box with emphasis of taking notes? That would be good for us learners as we would know how to structure our notes, maybe try the forest box from htb

    • @0xbro
      @0xbro  ปีที่แล้ว

      Yeah that's a great idea! Maybe I'll do something outside of HTB, but I like the idea about taking notes live for a video. Thanks for the suggestion!

  • @MHamidAshraf
    @MHamidAshraf ปีที่แล้ว +1

    Thanks for the video and sharing your template. I am able to sync my obsidian Vault with my github. syncing every minute

  • @Minoru72991
    @Minoru72991 หลายเดือนก่อน +2

    awesome vid! however, the template you've provided for obsidian is a dead link, is it possible for you to reupload it again if it's not too much trouble?

    • @0xbro
      @0xbro  หลายเดือนก่อน

      Hi there! Yeah, I will search for it and upload it again, thanks for notifying me!

  • @R4z0r_arg
    @R4z0r_arg 2 ปีที่แล้ว +1

    Amazing!! Thanks dude!

    • @0xbro
      @0xbro  2 ปีที่แล้ว

      💪🏻💪🏻💪🏻

  • @Martijn58
    @Martijn58 ปีที่แล้ว +1

    Great video btw!

    • @0xbro
      @0xbro  ปีที่แล้ว

      Thanks a lot :)

  • @tyler4723
    @tyler4723 2 ปีที่แล้ว +1

    Just learned about Obsidian and immediately had the idea to try out the graph for the OSCP course. Still trying to figure out how best to structure the notes so I can get a useful graph.
    Are you using tags like for the found users? To be able to show them on the graph

    • @0xbro
      @0xbro  2 ปีที่แล้ว +1

      When I did the OSCP I did not keep track of users through tags or special pages, I just used the search feature, but in hindsight I would definitely do it differently. I think using tags would be more than fine, alternatively you could create a folder containing all the users you find (like a dossier) and link them to their respective machines, but that seems a bit over-kill to me.

  • @pablochiquis8161
    @pablochiquis8161 2 ปีที่แล้ว +1

    Nice video bro

    • @0xbro
      @0xbro  2 ปีที่แล้ว

      Many thanks! 🙏

  • @shledakayn1486
    @shledakayn1486 2 ปีที่แล้ว +1

    Thanks man it's really helpful video!

    • @0xbro
      @0xbro  2 ปีที่แล้ว

      Glad you enjoyed it!

  • @muhammedalzureedi9588
    @muhammedalzureedi9588 2 ปีที่แล้ว +1

    Thanks man it's really helpful video

  • @nex7053
    @nex7053 2 หลายเดือนก่อน +1

    Im using git + obsidian. No struggles and i do not have to depend with my data on third party server.

    • @0xbro
      @0xbro  หลายเดือนก่อน

      yeah, I ended up opting for the same solution too!

  • @GilligansTravels
    @GilligansTravels 11 หลายเดือนก่อน +1

    Yeah thanks

    • @0xbro
      @0xbro  หลายเดือนก่อน

      💪🏻💪🏻

  • @thavrisco1632
    @thavrisco1632 ปีที่แล้ว +1

    It is possible to sync Obsidian vaults/notes across devices for $8 per month.

    • @0xbro
      @0xbro  ปีที่แล้ว

      Yeah, I know, but tbh I don't think it's worth it. I'm having a good time using GitHub, actually :) But yes, Obsidian Sync it's definitely an option

  • @Martijn58
    @Martijn58 ปีที่แล้ว +1

    Is it possible to clone your practical tools list ?

    • @0xbro
      @0xbro  ปีที่แล้ว +1

      It wasn't, but now I made it available as a template so that you can copy it :) Consider however that it is a bit outdated and I am no longer maintaining it because I went back to using Obsidian 👍🏻

  • @Lian00
    @Lian00 2 ปีที่แล้ว +1

    hello, love ur videos, I'm starting to get passionate about IT security and I would like to deepen, in the meantime I'm reading books, following forums about it and doing some experiments with vms (not with great success :P). Could I ask what course of study did you follow?

    • @0xbro
      @0xbro  2 ปีที่แล้ว +1

      Hello Lian, thanks and glad to see you here! I only attended a technical high school computer science, never went to University/college. When I finished high school, I worked as a software developer for a couple of years, and in the meantime I continued to study and practice as a self-taught, until I was then hired as a junior penetration tester :)

  • @louissaintherold807
    @louissaintherold807 ปีที่แล้ว

    where did you get your template

    • @0xbro
      @0xbro  ปีที่แล้ว

      Nowhere, I created it according to my needs

  • @Luke-ii9wp
    @Luke-ii9wp 2 ปีที่แล้ว +1

    Obsidian is FOSS?

    • @0xbro
      @0xbro  2 ปีที่แล้ว

      Unfortunately it is only Free but not Open Source

  • @alessandronotoladiegai6760
    @alessandronotoladiegai6760 2 ปีที่แล้ว +1

    Congratulations on your videos are fantastic, I'm a guy from Milan who has always been passionate about the IT world and computer security, it has always been my passion, but as often happens in life one understands it late ... I do a totally different job but I would really like to change my life, while I work I'm trying to study independently, to become a penetration tester, I have a general smattering but I can ask you for your email, I wish I could compare myself with you on many things ... I hope you will answer me .. continue so you are great

    • @0xbro
      @0xbro  2 ปีที่แล้ว +1

      Hey bro! No problem! Write me at 0xbro@proton.me or if you prefer on Telegram, write me at @MaOutis :) I will be happy to get in touch with you! Ci sentiamo!

    • @alessandronotoladiegai6760
      @alessandronotoladiegai6760 2 ปีที่แล้ว

      @@0xbro great man 💪🏼

  • @xenmode7580
    @xenmode7580 2 ปีที่แล้ว +1

    Very informative video, however I felt as through you went through the structure/format of your notes too quickly. Looking at a good example of how you organize everything would be incredibly helpful

    • @0xbro
      @0xbro  2 ปีที่แล้ว +2

      First of all, thanks! I published a sort of template representing how I generally organize my pentests's notes inside Obsidian.
      Basically I create folder for every net or subnet I have to test, then I create a single note for each machine I can identify. All the notes have the same structure: a high level summary, an information gathering section filled with the various scans I perform against the single IP, an enumeration section containing all the enumeration steps I conducted against the various services, the exploitation section containing all the vulnerabilities found, the various exploits and screenshots, a lateral movement section containing all the steps required to move to another user o machine, a privilege escalation section where I write all the enumeration steps and exploits required for the privesc and finally the Trophy & Loot section containing flags, credentials, restricted files, notes, ecc.
      When I see that two machines are connected (e.g. they have a dual network interface, or a service communicates with another machine, or even a note on the user's desktop suggests that there is a relationship with another PC), I simply create a link to the note dedicated to that other machine, so that the link can also be found within Obsidian's graph view.

  • @BbY1231
    @BbY1231 2 ปีที่แล้ว +1

    Sup

    • @0xbro
      @0xbro  2 ปีที่แล้ว

      🙏🏻🙏🏻🙏🏻