Exploiting Web-Based Applications