Web application penetration test of a banking suite