Penetration test of an investment website as an unauthenticated user