Security scan and web application penetration test of two online management portals