Penetration test of a mobile app for identification during an onboarding process