https://onsecurity.io/blog/what-is-a-pen-test/