A White Hat's Penetration Test