Penetration tests are attempts to evaluate the security of an IT infrastructure by safely trying to exploit operating system vulnerabilities, service and application flaws, improper configurations, or risky end-user behaviors. These assessments have become common across various industries, as they are useful in validating the efficacy of defensive mechanisms