Web application penetration test of an onboarding platform