added: Choosing vulnerable web application