Attacking traditional web applications– manual techniques