When performing a penetration test its obviously important to keep a record of what you did. This is important both to be able to replay an attack for demonstration purposes as well as for auditing purposes.

What tool is the most useful in logging this information. Currently, I use a mixture of one-note, word and handwritten notes.

What do you use?

  • This is not the best format for a question here. – schroeder Jan 6 '17 at 17:33

I'm not sure software recommendations are on-topic here, and you'll only get opinion based answers, but my favorite tool is Infobyte's Faraday. It allows me to upload scan results, check off compromised systems, view all the data in beautiful graphs, and even export this data into a usable report.

Mods: If you feel this answer is inappropriate, please delete or let me know and I'll take it down. Disclaimer: I am not affiliated with Infobyte in any way.

| improve this answer | |

I like using KeepNote. it allows me to keep track (i.e. time when i started a scan etc.)

| improve this answer | |
  • Welcome to Information Security. While useful, this answer should either be edited to add more detail describing pros/cons or added as a comment to the question once you have sufficient reputation. – Jedi Jan 6 '17 at 17:31

Not the answer you're looking for? Browse other questions tagged or ask your own question.