A client recently hired a penetration testing firm to conduct an assessment of their consumer-facing web application. Several days into the assessment, the clie...