vulnerability test