create directories for security testing