Grey-box testing