Web application penetration test of a web shop system