Security testing framework for software applications