Pentesting Node.js Application