Evidence-First Logger
PentLog — Evidence-First Pentest Logger
Start in minutes
Install once, create a context, and begin recording.
The same workflow scales from labs to full client engagements.
Install + first session
curl -sSf https://raw.githubusercontent.com/aancw/pentlog/main/install.sh | sh
pentlog setup
pentlog create
pentlog shellEvidence Chain
Full-fidelity ttyrec recordings, context metadata, and integrity hashes keep your chain of custody intact.
Session Intelligence
Search across logs and notes, extract timelines, and pinpoint exactly what happened and when.
Delivery Ready
Generate Markdown or HTML reports, archive with AES-256 encryption, and ship in client-ready format.
Getting Started
Learn the core workflow and create your first context.
User Guide
Sessions, search, notes, timeline, export, and AI analysis.
Advanced
Archiving, crash recovery, configuration, and storage layout.
Reference
CLI commands, flags, and tool comparisons.
Found a bug or want a feature? Open an issue. PentLog is licensed under the MIT License.
Everything you need, without the noise
Purpose-built to capture, organize, and prove your findings from first command to final report.
High-Fidelity Recording
Full-fidelity ttyrec capture with ANSI color, cursor moves, and redraws preserved.
Powerful Search
Regex + boolean search across logs and notes with fast incremental results.
Compliance Reports
Markdown and HTML reports with hashes, audit trails, and AES-256 archives.
AI Analysis
Summaries and vulnerability insights from Gemini or local Ollama models.
Live Sharing
Stream sessions in real time with an xterm.js viewer and full history.
Crash Recovery
Heartbeats and stale-session detection protect evidence from crashes.
Timeline Browser
Browse chronological command timelines, view output, and export JSON.
Context-Aware Sessions
Organize by client, engagement, and phase with auto metadata tracking.
Vulnerability Management
Track findings with severity, remediation notes, and session traceability.
From engagement to evidence in three steps
Set context
Create client, engagement, and phase metadata once. PentLog tracks the rest.
Record everything
Use pentlog shell to capture full terminal state,
including ANSI, cursor moves, and redraws.
Search and report
Find any command, extract timelines, and export reports with integrity hashes.
Capture defensible evidence in minutes
Install PentLog, start a session, and ship a report the same day.