Security Audit/Penetration testing SharePoint

Hi, We need to do penetration and vulnerability testing in our O365 SharePoint. Ay idea how to proceed with it? I am aware that the IP will be blacklisted by Microsoft incase of penetration and vuln...