Penetration test of an internal web application used by financial advisors