Many pentesters and application security professionals talk about what they do but often, unintentionally, fail to provide detailed insight into what they do.