can GCE do pentesting?

How can I configure CGE to do a test for SQL injection attacks against a service?