Penetration test of an API which can be used to create and retrieve orders