You can only perform penetration testing in your own lab environment and doing it on any live application is not allowed and it is a crime unless you are a professional and have appropriate permissions.