External penetration testing