Files & Notes
Hawkra provides dedicated storage for both files and notes within each workspace. Files let you upload engagement documents, configurations, keys, captures, evidence, and vulnerability proofs, all encrypted at rest. Notes give each user a private, encrypted notebook for capturing observations, commands, and analysis during an engagement.
Files
How It Works
Files are uploaded to a workspace via multipart upload, encrypted using the workspace's Data Encryption Key (DEK), and stored in the configured storage backend. Each file has a SHA-256 checksum computed before encryption so you can verify file integrity. When you download a file, it is automatically decrypted and delivered to your browser.
Filenames are sanitized on both upload and download to prevent path traversal attacks and ensure safe handling across operating systems.
Key Actions
Uploading a File
Navigate to the Files section of your workspace and click Add File. Upload a file from your local machine, give it a name, and pick what it is: a document type, or Vulnerability Proof, which attaches the file to a vulnerability you select. Hawkra accepts any file type.
Documents are grouped in the list by category:
| Category | Types |
|---|---|
| Documents | NDA, MOU, ROE, SOW, Report, Contract |
| Configurations | VPN Config, Config Backup |
| Keys | SSH Key |
| Captures | Traffic Capture |
| Evidence | Compliance evidence, added from the Compliance section |
| Other | Anything else |
Vulnerability proofs are listed separately below the documents. Scan result files for import are uploaded from the Imports tab instead (see Import Data).
Each pricing tier has a storage limit. Free accounts have 25 MB of storage and a 5 MB per-file limit; Premium has 10 GB and 100 MB. If your upload would exceed your remaining quota, the upload is rejected with an error message. Delete unused files to reclaim storage space.
Browsing Workspace Files
Each entry shows its type, the name you gave it, the original filename, the file size, and the upload date. Compliance evidence also links back to the objective it belongs to. A filter box narrows the list by filename or name, and a banner at the top shows your storage usage, which is shared across all of your workspaces.
Downloading a File
Click the download button on any file. Hawkra retrieves the encrypted file from storage, decrypts it using the workspace DEK, and sends the original file to your browser as an attachment download. The filename in the download header is sanitized for safety.
Editing and Deleting a File
Click the edit button to change a document's name or type. Compliance evidence cannot be edited here; manage it from the Compliance section. Click the delete button to permanently remove a file from storage and the database. Deleting a file reclaims the storage space against your quota.
Uploading and deleting files requires the EditAssets permission. Browsing and downloading files requires the ViewAssets permission.
Security
- Encryption at rest: Every file is encrypted with a per-workspace DEK before being written to storage. The encryption flag is stored alongside the file record.
- SHA-256 checksum: A checksum of the original file bytes is computed before encryption and stored with the file record.
- Filename sanitization: Path separators, control characters, and Unicode lookalike characters are replaced with underscores. Filenames are also truncated to 255 characters. This sanitization runs on both upload and download for defense in depth.
- Quota enforcement: Storage usage is tracked per user and checked before each upload to prevent abuse.
- Audit logging: File uploads and deletions are recorded in the workspace audit log.
Notes
How It Works
Notes are a lightweight, user-scoped notebook within each workspace. Each note has a title and free-form content, both of which are encrypted at rest using the workspace DEK. Notes are private to the user who created them -- other workspace members cannot see your notes, even administrators.
Key Actions
Creating a Note
Click Create Note in the Notes section. Provide a title (1--255 characters) and optional content (up to 100,000 characters). The title and content are encrypted before being stored. Content is plain text.
Viewing and Editing Notes
Your notes list shows all notes you have created in the current workspace. Click a note to view its full content. Click Edit to modify the title or content. Changes are re-encrypted before saving.
Deleting a Note
Click Delete to permanently remove a note. This action cannot be undone.
Using Notes with Ask AI
When using the Ask AI feature, you can include specific notes in the AI context selection. This allows you to feed your observations, command output, or analysis into the AI assistant for help with interpretation, next steps, or report writing.
Each user only sees their own notes within a workspace. There is no way for workspace owners, administrators, or other members to view your notes. This makes notes a safe place to record sensitive observations during testing.
Security
- Encrypted storage: Both the note title and content are encrypted with the workspace DEK before being written to the database.
- User-scoped access: The backend enforces that only the note's creator can read, update, or delete it. Requests for another user's notes return a "not found" response.
- Audit logging: Note creation, updates, and deletions are recorded in the workspace audit log.