These vulnerabilities can include flaws in operating systems, services, applications, configurations, or user behavior. Penetration testing involves manual or automated methods to target servers, web applications, wireless networks, etc. Results inform IT managers, prioritize remediation, and assess the feasibility and impact of system compromise.