Server-side and client-side application penetration test of a Computer Telephony Integration (CTI) solution