Web application penetration test of a lead capture form and the internal management interface