Scratchpad Editor

Example URL: https://pentest.ws/e/{engagement.id}/host/{host.id}/scratchpad

Scratchpad is a per Host repository of your notes, programming code, scripts, documentation, or any other rich text you want to associate with a Host.

Scratchpad Editor

• Code editing with syntax highlighting for over 150 programming languages.

• Hierarchical file structure with drag-and-drop.

• Download files through the browser or using wget/curl/downloadstring.

• Instantly switch between code & rich text editing.

• Import CherryTree XML files!

Toolbar Buttons

Tree Toolbar

Create a new sibling of the current document

Create a child of the current document

Create a duplicate of the current document

Expand the document tree

Collapse the document tree

Import documents from either raw text / code, or CherryTree XML files

Rebuild the tree from the document list. You will lose the hierarchy structure of the tree and all documents will be on the root node. This option is only needed when the document tree gets corrupted.

Document Toolbar

Select from the Code Editor or the Rich Text Editor. The contents of your document will be automatically converted between the two.

In Code mode, the language selector gives you syntax highlighting for over 150 different programming languages.

Download the content of the current document.

See the Public Download section below

Send To shortcuts to copy the current document to your clipboard. You can also send the document over to the CyberChef or Echo Up tools.

Document Tree

Scratchpad's document tree is a hierarchical file structure that supports drag-and-drop to reorder documents. You can also drag documents onto other documents to create child documents.

Double click a document in the Document Tree to rename the document.

Public Download Scratchpad Items

Public Download

Scratchpad documents can be downloaded using wget, curl, powershell or other HTTP request by clicking the button in the toolbar to make the document publicly available for 60 seconds.

The popup screen will give you a number of download commands and a timer indicating the number of seconds remaining before the document automatically returns to private state. At any time you can remove public access by clicking the button.

When a document is public, no authentication is required to access the contents. The document is accessed by referencing the cryptographically secure random alphanumeric string. Anyone with this token can access the content while the document is public.

Tier Availability

Scratchpad is available on Hobby Tier and Pro Tier, and limited to two (2) scratchpad documents per Host on Free Tier.

The Public Download feature is not available on Free Tier.