Web application penetration test of a modelling application