Hello @ifindproblems,
I suppose the starting point would to be do setup the current Alpha release and dig around? I am not sure how pen testing usually works/what kind of setup is done. I am happy to assist with specific questions though!
Hope that helps.
Ben