Web application penetration test of an online auction platform