Testing: Identify application entry points (OWASP-IG-003)