Vulnerability detection and exploitation of web applications