pentest gone wrong