TLS and VPN Flaws Offer Most Pen Tester Access