Which security test identifies vulnerabilities by actually exploiting them?

Explanation:

Pen-testing finds vulnerabilities by exploiting them.