Web application penetration test of a mini campaign site