Web3 Penetration Testing