python pen testing explained