https://que.com/penetration-testing-how-to-find-vulnerabilities-before-the-hackers-do/