Penetration test of a programming interface