https://cloudutsuk.com/posts/cybersecurity/webapplicationsecurity/web-application-scanning/