RecoverIt uses penetration testing techniques to exploit service failure recovery functions to trigger the execution of malicious payloads.