A word here on note-taking! Penetration testing gathers a lot of data, even on a small network, and I mean a lot! So when pen-testing, you need the ability to gather your incoming data as you are carrying out the test. Kali comes with several applications for this. Whichever one you choose, just choose one and use it. Six weeks after the test is run, and you need to go back and verify something, you'll be happy you did. Also, when testing in a high-security environment, such as a network that must be either HIPPA- or PCI-compliant, these notes are particularly useful when building your report. Also, make sure you keep all your project files in one directory along with this framework. Another reason to take good notes is that, if legal actions arise, your notes could be your best defense.
The following screenshot shows the framework Bo uses. He makes a folder...
