Could you please help me write a penetration test plan for a fictitious database? It needs to be thorough and thoughtful. For example, don't just think about the ER diagram and how the database might be hacked, but consider how social engineering or other methods might be used to breach it. Thank you in advance.