I don't know what did u ment by directions . but 1st of all you need to have the legal permission from the target environment. better make it written. if your question is how to perform a pentest . its the normal process of a pentest , everyone have their own methods