Web application penetration test of 6 websites