RAT: vulnerability detection approach for testing web application firewalls