Penetration test of an internal client application and the associated API interface