Sounds like you need to spend more time on information gathering, system identification and infrastructure/network mapping. As a professional penetration tester Im sure you know what Im talking about.
I also hope you put a bit more effort into your spelling and grammar when you produce the report for your client.


