protocol penetration testing