Standard penetration test of web applications