THE ETHICS OF PENETRATION TESTING: NAVIGATING THE LEGAL LANDSCAPE