Penetration test of website and desktop application of a document management system