pentest mistakes