Mobile and web application penetration tests of a cloud and on-premise solution