This is a good intro to pen testing: https://www.sgsgroup.com.hk/en/news/2014/02/general-requirem...