Mobile black box security testing