Web application penetration test of a crowdfunding platform