WAFNinja: attack Web Application Firewalls