Download the template for Notion here: 0xbro.notion.site/d25f47351476412f94dc38201be0c72e?v=e1bd4fbb05ea465ea558d1be825ac9d4 Download the template for Obsidian here: drive.google.com/file/d/1Fo_h5jLO3QDpzaOsfxx6TvgbGeaHYl1G/view?usp=sharing
This is the exact issue that I am currently struggling with. Your video is the only one out there that helped me with my problem. Thanks a lot for making such a unique content.
Our ability to make sense of the world is highly limited to what we can write and how clearly we can express ourselves. And this, in my opinion, applies to everything, from intimate relationships to highly technical endeavors, such as penetration testing. Yet, not much attention goes to note taking tools, and what kind of features a note taking tool should offer the user. Thank you for the refreshing video!
Yeah, I feel the same way! There are great tools that allow you to do great things, but the same tools may not be the right choice for other kinds of things. In this case, certain tools that should be a support end up becoming the exact opposite, turning them into real limitations. I think choosing your toolset carefully is critical if you want to get the best out of the situation you face.
OMG. Buddy. I found this video useful. And the blog website and notion link you shared. Damn this is useful and well organized. I am grateful I found your work. Keep it up. Really man. (:
Glad to have been useful to you! Thank you very much for the kind words 🙏🏻 I made both the templates public, in case you might need them you can find both the links in the first pinned comment
Hey, can you do a walk through of a htb box with emphasis of taking notes? That would be good for us learners as we would know how to structure our notes, maybe try the forest box from htb
Just learned about Obsidian and immediately had the idea to try out the graph for the OSCP course. Still trying to figure out how best to structure the notes so I can get a useful graph. Are you using tags like for the found users? To be able to show them on the graph
When I did the OSCP I did not keep track of users through tags or special pages, I just used the search feature, but in hindsight I would definitely do it differently. I think using tags would be more than fine, alternatively you could create a folder containing all the users you find (like a dossier) and link them to their respective machines, but that seems a bit over-kill to me.
hello, love ur videos, I'm starting to get passionate about IT security and I would like to deepen, in the meantime I'm reading books, following forums about it and doing some experiments with vms (not with great success :P). Could I ask what course of study did you follow?
Hello Lian, thanks and glad to see you here! I only attended a technical high school computer science, never went to University/college. When I finished high school, I worked as a software developer for a couple of years, and in the meantime I continued to study and practice as a self-taught, until I was then hired as a junior penetration tester :)
Congratulations on your videos are fantastic, I'm a guy from Milan who has always been passionate about the IT world and computer security, it has always been my passion, but as often happens in life one understands it late ... I do a totally different job but I would really like to change my life, while I work I'm trying to study independently, to become a penetration tester, I have a general smattering but I can ask you for your email, I wish I could compare myself with you on many things ... I hope you will answer me .. continue so you are great
Hey bro! No problem! Write me at 0xbro@proton.me or if you prefer on Telegram, write me at @MaOutis :) I will be happy to get in touch with you! Ci sentiamo!
Very informative video, however I felt as through you went through the structure/format of your notes too quickly. Looking at a good example of how you organize everything would be incredibly helpful
First of all, thanks! I published a sort of template representing how I generally organize my pentests's notes inside Obsidian. Basically I create folder for every net or subnet I have to test, then I create a single note for each machine I can identify. All the notes have the same structure: a high level summary, an information gathering section filled with the various scans I perform against the single IP, an enumeration section containing all the enumeration steps I conducted against the various services, the exploitation section containing all the vulnerabilities found, the various exploits and screenshots, a lateral movement section containing all the steps required to move to another user o machine, a privilege escalation section where I write all the enumeration steps and exploits required for the privesc and finally the Trophy & Loot section containing flags, credentials, restricted files, notes, ecc. When I see that two machines are connected (e.g. they have a dual network interface, or a service communicates with another machine, or even a note on the user's desktop suggests that there is a relationship with another PC), I simply create a link to the note dedicated to that other machine, so that the link can also be found within Obsidian's graph view.
It wasn't, but now I made it available as a template so that you can copy it :) Consider however that it is a bit outdated and I am no longer maintaining it because I went back to using Obsidian 👍🏻
Download the template for Notion here: 0xbro.notion.site/d25f47351476412f94dc38201be0c72e?v=e1bd4fbb05ea465ea558d1be825ac9d4
Download the template for Obsidian here: drive.google.com/file/d/1Fo_h5jLO3QDpzaOsfxx6TvgbGeaHYl1G/view?usp=sharing
First of all, big congrats to you for passing your OSCP! And thank
s for uploading this very informative video. Thanks buddy! ☺
This is the exact issue that I am currently struggling with. Your video is the only one out there that helped me with my problem. Thanks a lot for making such a unique content.
Very glad you found the content useful! 🙏🏼
Our ability to make sense of the world is highly limited to what we can write and how clearly we can express ourselves. And this, in my opinion, applies to everything, from intimate relationships to highly technical endeavors, such as penetration testing.
Yet, not much attention goes to note taking tools, and what kind of features a note taking tool should offer the user.
Thank you for the refreshing video!
Yeah, I feel the same way! There are great tools that allow you to do great things, but the same tools may not be the right choice for other kinds of things. In this case, certain tools that should be a support end up becoming the exact opposite, turning them into real limitations.
I think choosing your toolset carefully is critical if you want to get the best out of the situation you face.
OMG. Buddy. I found this video useful. And the blog website and notion link you shared. Damn this is useful and well organized.
I am grateful I found your work. Keep it up. Really man. (:
Glad to have been useful to you! Thank you very much for the kind words 🙏🏻
I made both the templates public, in case you might need them you can find both the links in the first pinned comment
Bro you really are my Brother now thank you so much!
Super helpful. Thank you for the recommendation and best of luck in your endeavors!
Thank you so much! Wish you the best, too!
Hey brotha I’m just getting this video now and I love everything u said here! I’ve been using cherrytree but I will be moving to obsidian today!
Yeah, great change, you won't regret it ;)
This is Gold. Very Informative
Thank You.
🤩
Unique and useful contact. Thanks bro
Glad to hear it! 🙏🏻
Mitico!!! Keep up! Love the video editing ;)
Thank you very much! Appreciate you enjoyed the editing ☺️
Hey, can you do a walk through of a htb box with emphasis of taking notes? That would be good for us learners as we would know how to structure our notes, maybe try the forest box from htb
Yeah that's a great idea! Maybe I'll do something outside of HTB, but I like the idea about taking notes live for a video. Thanks for the suggestion!
Thanks for the video and sharing your template. I am able to sync my obsidian Vault with my github. syncing every minute
Thanks for this vlog mate this are really helpful.
Thanks man it's really helpful video
Thanks man it's really helpful video!
Glad you enjoyed it!
Yeah thanks
Amazing!! Thanks dude!
💪🏻💪🏻💪🏻
Great video btw!
Thanks a lot :)
Just learned about Obsidian and immediately had the idea to try out the graph for the OSCP course. Still trying to figure out how best to structure the notes so I can get a useful graph.
Are you using tags like for the found users? To be able to show them on the graph
When I did the OSCP I did not keep track of users through tags or special pages, I just used the search feature, but in hindsight I would definitely do it differently. I think using tags would be more than fine, alternatively you could create a folder containing all the users you find (like a dossier) and link them to their respective machines, but that seems a bit over-kill to me.
Nice video bro
Many thanks! 🙏
hello, love ur videos, I'm starting to get passionate about IT security and I would like to deepen, in the meantime I'm reading books, following forums about it and doing some experiments with vms (not with great success :P). Could I ask what course of study did you follow?
Hello Lian, thanks and glad to see you here! I only attended a technical high school computer science, never went to University/college. When I finished high school, I worked as a software developer for a couple of years, and in the meantime I continued to study and practice as a self-taught, until I was then hired as a junior penetration tester :)
It is possible to sync Obsidian vaults/notes across devices for $8 per month.
Yeah, I know, but tbh I don't think it's worth it. I'm having a good time using GitHub, actually :) But yes, Obsidian Sync it's definitely an option
Congratulations on your videos are fantastic, I'm a guy from Milan who has always been passionate about the IT world and computer security, it has always been my passion, but as often happens in life one understands it late ... I do a totally different job but I would really like to change my life, while I work I'm trying to study independently, to become a penetration tester, I have a general smattering but I can ask you for your email, I wish I could compare myself with you on many things ... I hope you will answer me .. continue so you are great
Hey bro! No problem! Write me at 0xbro@proton.me or if you prefer on Telegram, write me at @MaOutis :) I will be happy to get in touch with you! Ci sentiamo!
@@0xbro great man 💪🏼
Very informative video, however I felt as through you went through the structure/format of your notes too quickly. Looking at a good example of how you organize everything would be incredibly helpful
First of all, thanks! I published a sort of template representing how I generally organize my pentests's notes inside Obsidian.
Basically I create folder for every net or subnet I have to test, then I create a single note for each machine I can identify. All the notes have the same structure: a high level summary, an information gathering section filled with the various scans I perform against the single IP, an enumeration section containing all the enumeration steps I conducted against the various services, the exploitation section containing all the vulnerabilities found, the various exploits and screenshots, a lateral movement section containing all the steps required to move to another user o machine, a privilege escalation section where I write all the enumeration steps and exploits required for the privesc and finally the Trophy & Loot section containing flags, credentials, restricted files, notes, ecc.
When I see that two machines are connected (e.g. they have a dual network interface, or a service communicates with another machine, or even a note on the user's desktop suggests that there is a relationship with another PC), I simply create a link to the note dedicated to that other machine, so that the link can also be found within Obsidian's graph view.
Is it possible to clone your practical tools list ?
It wasn't, but now I made it available as a template so that you can copy it :) Consider however that it is a bit outdated and I am no longer maintaining it because I went back to using Obsidian 👍🏻
Obsidian is FOSS?
Unfortunately it is only Free but not Open Source
where did you get your template
Nowhere, I created it according to my needs
Sup
🙏🏻🙏🏻🙏🏻