Automated pen testing script