SHarPen: SoC Security Verification by Hardware Penetration Test