Browsing: internal penetration testing