Public Asset Vulnerability Assessments and PenTesting