Recommendations for Documenting a Vulnerability

Now, let’s say we were to create a PoC for the hacking lab. And let’s say it took you 7 days to completely test the entire hacking lab. Now, will it be right if you go again through the entire lab and find the vulnerabilities again, so that you can take relevant screenshots and record videos? No, It would be such a waste of time, right? Also, remember, when you take up such projects, you will get paid for all the tasks you do, and the time you spend in conducting the VAPT. And sometimes, you may not find the same vulnerability again as the developer may see what you are testing and patch some minor vulnerability even before you report it. So, if you were to take screenshots at a later time, you may lose out on this vulnerability that you had found. Also, sometimes there could be a power cut, or system shut down while you are testing the application and you may lose important data. This means that you will have to find the vulnerability all over again, and sometimes when the tests are complicated, it is not easy to do so.

So, it is strongly recommended that you take screenshots and videos while you are testing the application.