Re: which is next step after using tools in penetration testing?

[rohnskii () gmail com]

I can't remember your original post, so this point may be repetitive.

Before you get to the "after using tools" step, in other words, before you do any pen testing at all, make sure you 
have permission to do the test.  Preferably in writing.  In your request for permission at the minimum, clearly state 
what type of testing, and when you will be doing it.  You don't want to do your testing and accidentally crash 
something in production that you might not be aware is going on.  This is definitely a situation where it is MUCH 
better to ask for permission BEFORE doing.  Even though you are doing this in-house, you don't want to surprise anyone 
else if there are problems.