Performing a white box penetration test