Few can argue that Web applications present significant threat of attacks for organisations. For IT security professionals, they also present a significant challenge. To stay ahead of hackers and protect sensitive data, security teams need to understand how vulnerabilities in applications are first exposed and then exploited by cyber-criminals for profit.