documenting during pentest

[nbaronian at gmail.com (Nick Baronian)]

I am fond of the Dradis Framework (http://dradisframework.org/).
Never used it in a non-team fashion, so it might be overkill but it
does a great job of importing nmap, nessus, burp and nikto.  The most
beneficial part for me is that it allows for an easy way to share
findings with your team, so everyone isn't overlapping and/or is aware
of things.

Nick Baronian

On Wed, Mar 17, 2010 at 12:01 PM, Arnaud <lists at arnaudloos.com> wrote:
> I just completed my first hacker challenge and was surprised by the fact
> that my biggest obstacle was keeping track of the various
> systems/ports/services/vulns that I identified. With no coherent strategy
> for keeping track of what systems and services I had already targeted I
> quickly lost track of where I had been and what I had done. What strategy or
> software do others use to keep track of such things?
>
> Thanks.
> Arnaud-
>
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom at mail.pauldotcom.com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com