inurl:http://www aiotestking com/ During what phase of the penetration test would you normally discover this?