Application security testing tool