All they need do is contact the owner first and suggest changing the password, then offer the penetration test service. There is no need to do it without the ow

All they need do is contact the owner first and suggest changing the password, then offer the penetration test service. There is no need to do it without the owner's explicit consent.