Attacking and Exploiting Modern Web Applications