Hack The Box



Organization

We have already seen the term overview mentioned several times. To understand how important this term is, imagine the following situation:

You are standing on a big mountain, and at the bottom of the mountain, there is a vast forest. On the horizon, we see another mountain we want to reach. The difficulty here is that we will not see this mountain as soon as we go down into the forest. The only way to reach the mountain is to orient ourselves using the lakes, rivers, and fields between these two mountains.

This means that we should take all the necessary tools with us, like a lighter, knife, tent, and others, and set all the interim orientation points to avoid getting lost. Because as soon as we get lost, we cannot move through the forest disoriented, hoping to reach our goal somehow, or we will have to move back to the first mountain to reorient ourselves.

We can see how the terms depend on each other and how important it is to have a map to orient ourselves. By completing the previous exercises, we have already made the first drawings on our map. These will help us to understand where we are and where we want to go. Being organized is significant in penetration testing because the entire report writing process has to be structured.

It may take us a single day to take over several systems. So we don't want to keep looking for sources or information we need over and over again. Organization is best described in the following example:

  • An inexperienced woodcutter takes 30 minutes to sharpen his axe and 3 hours to cut down the tree.
  • The experienced one will sharpen the axe for 3 hours and cut down the tree within 30 minutes.

There are many different management techniques and methods that we can use.

These include:

  • Scrum
  • Agile
  • ToDo-Lists
  • Bullet Journal and more.

Optional Exercise:

  • Create a list of different management techniques and methods that you can find and list all their negatives and positives. Experiment with the ones that suit you best and choose/create a method for yourself.