Penetration test of a mobile banking app