Script attacks for penetration testing