You can choose to store it with the media in some cases or keep it with other important system documentation. For example, if there is a vulnerability in an SSL library and you install a web server in two ways, one with SSL and one without, it is very likely that you will only find the vulnerability in one of the installations.Įven if your documentation is as light as a checklist of options selected during install, it is critical to keep and maintain this documentation. Differing choices made during installation can have a tremendous impact on the final result of the install, including specific vulnerabilities which may exist in one installation type but not another. It is important to make sure that each time you install a particular piece of software, you do it in the exact same way. You will be dealing with a substantial number of software installations within your test lab. While documentation around how to install software seems like it would exist more in the realm of system or application administrators, it plays an important part in the penetration test lab as well. Jeremy Faircloth, in Penetration Tester's Open Source Toolkit (Third Edition), 2011 10.2.3.1 Documenting install procedures

Download trinity hacking tool