w4af: web advanced application attack and audit framework, the open source web vulnerability scanner.