UTeM security audit via penetration testing