Penetration test of a Covid-19 related web application