Operator tip · msfconsole
Workspaces keep you honest
workspace -a lab-oslo isolates hosts/loot per engagement. Don't mix client A with Friday CTF notes.
Guide
Default workspace is a junk drawer. After three labs your hosts, creds, and loot bleed together and you cannot tell which note belongs to which engagement.
Why it matters
Workspaces isolate DB state: hosts, services, loot, notes. That is engagement hygiene — same instinct as separate git branches or separate report folders. Mixing client A with a CTF is how you accidentally paste the wrong credential into a ticket.
How-to
workspace -a lab-oslo workspace # list workspace lab-oslo # switch db_nmap -sC -sV TARGET hosts services loot
- Name workspaces after the engagement, not the vulnerability.
- Export/notes before you delete a workspace.
- On shared MSF instances, never leave loot in default.