Penetration Testing for Authentication Vulnerabilities