When performing a penetration test its obviously important to keep a record of what you did. This is important both to be able to replay an attack for demonstration purposes as well as for auditing purposes.

What tool is the most useful in logging this information. Currently, I use a mixture of one-note, word and handwritten notes.

What do you use?

closed as off-topic by Xander, schroeder Jan 6 '17 at 17:33

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

  • This is not the best format for a question here. – schroeder Jan 6 '17 at 17:33

I'm not sure software recommendations are on-topic here, and you'll only get opinion based answers, but my favorite tool is Infobyte's Faraday. It allows me to upload scan results, check off compromised systems, view all the data in beautiful graphs, and even export this data into a usable report.

Mods: If you feel this answer is inappropriate, please delete or let me know and I'll take it down. Disclaimer: I am not affiliated with Infobyte in any way.


I like using KeepNote. it allows me to keep track (i.e. time when i started a scan etc.)

  • Welcome to Information Security. While useful, this answer should either be edited to add more detail describing pros/cons or added as a comment to the question once you have sufficient reputation. – Jedi Jan 6 '17 at 17:31

Not the answer you're looking for? Browse other questions tagged or ask your own question.