Ask HN: Penetration testing

Anon account since I may do this type of work more and more. I took the Ethical Hacker certification (C|EH) a few about 5 years ago and never did a lot with it from a professional standpoint. I was asked by a company to point out vulnerabilities in their organization and I think that I can handle this. I know a lot of the usual things like using Whois, social engineering, sql injection, network scanning, packet snipping, using e-mail account password hints... What are other ways to gather information that I am not thinking about right now. I want to really evaluate my skills and ensure that I can do the right kind of job and not falsely lead anyone Already their receptionist gives out way to much information. Their WhoIs record does as well. I was already able to send my wife into the organization with a small wireless base station where she was able to plug it into a conference room jack in 2 minutes without even any questions..Maybe security guards don't question attractive girls showing cleavage who ask to use the restooom.... Second, I am considering having a dedicated device for this kind of task. I have a CR-48. Maybe flash the bios, drop in a larger SSD and Ubuntu Net ReMix? Thoughts are appreciated.