penetration test - How to Estimate time taken for Web Application ...