Tools And Tips

Pentesters should maintain a knowledge base in the format of their choosing, containing quick reference guides for setup tasks and cheat sheets for common commands for each phase of an assessment.

Every payload, command and tip should be aggregated as we never know when it may come in handy.

Checklists, report templates for assessment types and a findings/vulnerability database should be maintained. This can be a spreadsheet having columns like a title, description, impact, remediation, advice and references.