This is a story of that process, but with a twist at the end. It serves as a lesson that pen testing can never be automated.