Pentesting is done on a wide range of systems such as servers, operating systems, wireless systems, fax machines, computers, printers, devices with an internet connection, workstations, virtual environment, etc. Mostly, security research will be done on these devices.