Application penetration test of a website