How you will do server security testing for any website?