Gaining access to vulnerable web applications