Every bug hunter knows the feeling.

You're deep in a session. You find something weird — an IDOR, a sketchy endpoint, a parameter that behaves differently than it should. You think "I'll note this later."

You never do.

Three days later you're staring at a blank report. No notes. No screenshots. No proof. Just a vague memory of something that felt important.

I got tired of that loop. So I built PwnLog.