Owen's Thursday, two ways
8 lessons · 24 prompts
A day in the life of a Penetration Tester: what changes with these prompts.
Track progress as a memberOwen, a penetration tester at a small security firm.
Owen starts Thursday with a scope document from a regional credit union. The rules of engagement are long, and the client wants the test to start Monday. He opens ChatGPT, pastes the prompt from Scoping And Planning, and adds the client's notes about their branch network and the one system that must stay untouched. In twenty minutes he has a testing plan he can edit, with the open questions listed at the top.
After lunch he runs an Nmap scan on the external range. The output is a long file with hundreds of lines. He uses the Recon And Scan Triage prompt in Claude, pastes the scan summary, and asks for the hosts that look most worth a closer look. The tool groups them by service and flags two old web servers. Owen checks each one himself, but he starts with the right two.
Friday morning he writes the report. Instead of staring at a blank page, he uses the Client Reporting And Communication prompt in Gemini to turn his rough notes into an executive summary and a findings section. He rewrites the parts that sound too soft and keeps the structure.
By 3 p.m. he has sent the draft and set up a retest tracker using the Remediation And Retesting prompt. The time he won back goes to his daughter's Saturday morning football match, and to a longer look at one web application he had been meaning to test properly.
Before
- Scope documents take a full day
- Scan output is a wall of noise
- Report writing eats into the weekend
- Retests tracked across scattered emails
After this course
- Scope plan drafted before lunch
- Scan triage points to the right hosts
- Reports written while findings are fresh
- Retests tracked in one shared list
What you'll learn
- Scope To Plan: Turn a client scope document into a testing plan and rules of engagement.
- Triage Scan Output: Sort scan results so you know which targets deserve attention first.
- Web App Test Cases: Build clear test cases from how an application responds.
- Plan Safe Exploits: Work through exploitation steps and debug failures with a second set of eyes.
- Phishing Simulation Copy: Draft authorized simulation emails and read the response results.
- Logs And Evidence: Correlate log entries and organize evidence for your findings.
- Client-Ready Reports: Turn technical findings into executive summaries and clear explanations.
- Fixes And Retests: Recommend fixes, plan retests, and track remediation with clients.
How this course works
- 8 lessonsOne task of your job each, from scoping and planning to remediation and retesting.
- Ready-to-paste promptsCopy, fill in the parts in {{brackets}}, paste into ChatGPT, Claude or Gemini.
- Tick and completeTick the prompts you tried and mark each lesson complete.
- Get certifiedFinish and keep the prompts as your own library.