Penetration Testing: Challenges and Solutions