Hello, I am working on writing a penetration test plan for a fictitious database. What would be good tools and "check list" of items I should do to test for vulnerabilities of this fictitious database? I am trying to cover both how the database might be hacked and also how social engineering or other methods might be used to breach it. Thank you in advance for any help you can provide.