A web-app security scanner framework