Penetration › Module 4 › Lesson 3
Notes Discipline
Enumeration notes are legal evidence — timestamped, scoped to $LAB_HOST, chmod 600, no stranger IPs.
Visual · pentest_notes_discipline
Notes discipline literacy. $LAB_HOST only. Original Cyberlium.
Opening
If it is not in notes, it did not happen — and if stranger IPs are in notes, you mishandled evidence.
Pentesters maintain contemporaneous notes: commands, outputs, screenshots hashes, scope references, and timestamps. Good notes survive report writing and legal review. Bad notes mix stranger IPs, discard RoE references, or live in world-readable files. Cyberlium requires $HOME/cyberlium-lab notes at chmod 600, scoped to $LAB_HOST. You will NOT paste classmate scan dumps into Discord or keep café router banners as trophies. Next: Enum Lab.
1. Note fields every entry needs
Date/time UTC, tool, command summary, target=$LAB_HOST, purpose (port scan, version probe), output summary, next step. RoE file reference optional but professional.
Screenshots get filenames matching note entries — not random desktop clutter with stranger URLs visible.
Command guide
Try these commands — Note fields every entry needs
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
Full port scan — slow; lab RoE may limit to top ports Nmap timing — https://nmap.org/book/man-performance.html
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install nmap
macOS:
Command — copy this
brew install nmap
Windows:
Command — copy this
choco install nmap # or download https://nmap.org/download.html
═══ LINUX / macOS ═══
Command — copy this
source "$HOME/cyberlium-lab/t19-lab.env" nmap -p- -T4 --min-rate 1000 "$LAB_HOST" 2>/dev/null | head -30 || nmap --top-ports 1000 "$LAB_HOST" | head -30
Primary tools to practice this lesson: nmap. Reference sites: Full port scan; Nmap timing (https://nmap.org/book/man-performance.html). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Redaction and scope hygiene
If a tool accidentally touches out-of-scope neighbors, redact those IPs before saving. Never share raw scans containing dorm or classmate addresses.
Enterprise testers use secure note platforms; you use chmod 600 text files — same confidentiality habit.
3. Notes feed the report — start clean
Module 9 reporting reuses enumeration notes. Garbage notes with scope violations become garbage reports and career problems.
Ship: note entry template with required fields for $LAB_HOST work. Next: Enum Lab.
4. What you ship: enumeration note entry template
Template with time, tool, target=$LAB_HOST, purpose, output, next. chmod 600. Redact strangers.
5. What you record before the next lesson
Date. Note template fields. $LAB_HOST default target. File t19-m04-l03-notes-discipline.txt chmod 600.
6. Wrong vs right: stranger nets vs YOUR lab VMs
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
Wrong
World-readable notes on Desktop. Share enum dumps with classmate IPs in Discord.
Right
Write note template with required fields. Next: Enum Lab.
Mission: freeze enumeration note template
1) List required note fields. 2) Default target = $LAB_HOST. 3) chmod 600 policy line. Never store stranger IPs unredacted.
Stuck? Ask Cyberlium AI Mentor
Notes are your alibi — write them like counsel will read them.
Knowledge Check
APPLY: Enumeration notes should default target to:
Multiple choice
Knowledge Check
APPLY: True or False: Accidental out-of-scope IPs should be redacted before saving notes.
True or False
Knowledge Check
APPLY: cyberlium-lab notes should be:
Multiple choice