Look
Reconnaissance: find what is there
I start by finding out what is running, without touching anything.
writeups
Write-ups
Notes on labs and challenges: what I did and what I learned.
How I approach a room
Map
Enumeration: services, versions, entry points
I list every service and version to find possible ways in.
Test
Exploitation: try safe, controlled attacks
I try controlled attacks, only in legal lab environments.
Learn
Lessons: what worked and how to defend it
I write down what worked and how a defender could stop it.