Penetration testing Java applications for fun and profit