Web application penetration test of a configuration assistant