Web application penetration test of a sales application