while doing a penetration test you discover that the organization is using