Blackbox (zero-knowledge) penetration test