Pentest, OWASP, ransomwares