Application penetration test on a portal