Probabilistic Pentesting