Standard penetration test of REST API