Web application penetration test of an HR system