Penetration test of a web shop