Web application penetration test of an internal web application for calculation and generation of invoices