Standard penetration test of web application and API interfaces