Evidence Pack
Bundle redacted bounty evidence from YOUR path — index, report, validation, scope, triage mock.
Visual · t20_evidence_pack
Evidence pack = mentor handoff bundle from $PROGRAM or $LAB_BOUNTY. Original Cyberlium.
One indexed pack with redactions beats a folder called nuclei_output_final.zip on stranger hosts.
Assemble evidence pack: $PROGRAM scope excerpt or $LAB_BOUNTY brief, asset map excerpt, bug class cards, validation pipeline checklist, minimal proof redacted, report DRAFT, triage lab threads, lab path diagram, capstone checklist, integrity statement (no OOS, no data harm, no stranger cookbooks). Single directory chmod 600 — index.md lists contents with UTC dates and redactions applied. Mentor copy redacts internal URLs if policy requires. No live tokens, no stranger scan dumps, no phishing artifacts. Gap paragraph: skills to grow on same enrolled program — not filler from unauthorized tests.
1. Pack contents
Minimum: scope, asset map, class cards, validation pack, report draft, triage lab, path, checklist, index.
Optional: platform enrollment screenshot redacted, dup search notes.
Command guide
Try these commands — Pack contents
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
URL archive review — gau output in asset map Report draft completeness
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
go install github.com/lc/gau/v2/cmd/gau@latest
macOS:
Command — copy this
go install github.com/lc/gau/v2/cmd/gau@latest
Windows:
Command — copy this
go install github.com/lc/gau/v2/cmd/gau@latest
═══ LINUX / macOS ═══
Command — copy this
source "$HOME/cyberlium-lab/t20-scope.env" gau "$(cat "$HOME/cyberlium-lab/t20-root-domain.txt" 2>/dev/null || echo httpbin.org)" 2>/dev/null | head -10 || curl -sS "https://$SCOPE_HOST/links/5/0" 2>/dev/null | head -10 grep title "$HOME/cyberlium-lab/t20-report-draft.txt" 2>/dev/null || echo 'Complete report draft'
Primary tools to practice this lesson: gau, grep. Reference sites: URL archive review; Report draft completeness. Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Index fields
Artifact name, module lesson, path, UTC date, description, redactions applied.
Cross-link checklist row to index row.
3. Integrity
Statement: enrolled scope or $LAB_BOUNTY only, minimal proof, no mass exfil, professional triage comms.
Secure pack — no public upload of raw HTTP with session cookies.
4. What you ship: bounty evidence pack
Bundled deliverables + index + integrity line — chmod 600.
5. What you record before the next lesson
Evidence pack path.
6. Wrong vs right: random sites vs in-scope program
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
- Wrong: Add stranger nuclei scan zip for 'broader coverage.'
- Right: Evidence pack assembled. Next: Capstone Lab.
Mission: assemble evidence pack
1) Bundle scope map validation report triage path checklist index. 2) Write integrity line. 3) Gap paragraph; secure pack.
Stuck? Ask Cyberlium AI Mentor
Ask Mentor: “Minimum index rows for capstone?”
APPLY: Evidence pack includes:
APPLY: True or False: Live tokens in mentor pack OK.
APPLY: Integrity line states: