Web application penetration test of a tendering platform