Beyond Scans: Real Pentesting Stories from the Front Lines