Web application penetration test of a license management tool