Aluc talk on 28c3
Actually, all talk is repeating summary. Important is a structure, that allow You threat pentesting as a job, not as an art of acting. Plus – correct way to communicate with client. Recommended.
Thx Aluc, btw, for link to Chris Nickerson talk last year on BruCON. Missed one.