Penetration test of two web applications with a promotion and a game