Operating system level penetration testing