Avoiding Pen Test Pitfalls