A computing system comprising: an application security scanner (102, 200), including a crawler to obtain attack entry points of an application during a crawling phase; characterized by: a dynamic taint module to: receive a first message from the application security scanner (101, 200) to initiate the dynamic taint module; initiate the dynamic taint module in response to the first message; intercept program execution of the application during the crawling phase to determine security vulnerability candidates by marking untrusted one or more user inputs as taint sources and tracing the user inputs to determine whether the respective user inputs lead to a dangerous function call generate a report during the crawling phase, wherein the report includes a vulnerability candidate list of one or more vulnerability candidates of the application determined by the dynamic taint module during the crawling phase; cause sending of the report to the application security scanner (102, 200); receive a second message from the application security scanner (102, 200) to disable the dynamic taint module; and disable at least part of the dynamic taint module based on the second message; and the application security scanner (102, 200) further comprising an attack module; and an adjustment module to determine a scanning strategy by prioritizing the vulnerability candidate list in an attack conducted by the attack module on the application. an application security scanner (102, 200), including a crawler to obtain attack entry points of an application during a crawling phase; characterized by: a dynamic taint module to: receive a first message from the application security scanner (101, 200) to initiate the dynamic taint module; initiate the dynamic taint module in response to the first message; intercept program execution of the application during the crawling phase to determine security vulnerability candidates by marking untrusted one or more user inputs as taint sources and tracing the user inputs to determine whether the respective user inputs lead to a dangerous function call generate a report during the crawling phase, wherein the report includes a vulnerability candidate list of one or more vulnerability candidates of the application determined by the dynamic taint module during the crawling phase; cause sending of the report to the application security scanner (102, 200); receive a second message from the application security scanner (102, 200) to disable the dynamic taint module; and disable at least part of the dynamic taint module based on the second message; and the application security scanner (102, 200) further comprising an attack module; and an adjustment module to determine a scanning strategy by prioritizing the vulnerability candidate list in an attack conducted by the attack module on the application. a dynamic taint module to: receive a first message from the application security scanner (101, 200) to initiate the dynamic taint module; initiate the dynamic taint module in response to the first message; intercept program execution of the application during the crawling phase to determine security vulnerability candidates by marking untrusted one or more user inputs as taint sources and tracing the user inputs to determine whether the respective user inputs lead to a dangerous function call generate a report during the crawling phase, wherein the report includes a vulnerability candidate list of one or more vulnerability candidates of the application determined by the dynamic taint module during the crawling phase; cause sending of the report to the application security scanner (102, 200); receive a second message from the application security scanner (102, 200) to disable the dynamic taint module; and disable at least part of the dynamic taint module based on the second message; and the application security scanner (102, 200) further comprising an attack module; and an adjustment module to determine a scanning strategy by prioritizing the vulnerability candidate list in an attack conducted by the attack module on the application. receive a first message from the application security scanner (101, 200) to initiate the dynamic taint module; initiate the dynamic taint module in response to the first message; intercept program execution of the application during the crawling phase to determine security vulnerability candidates by marking untrusted one or more user inputs as taint sources and tracing the user inputs to determine whether the respective user inputs lead to a dangerous function call generate a report during the crawling phase, wherein the report includes a vulnerability candidate list of one or more vulnerability candidates of the application determined by the dynamic taint module during the crawling phase; cause sending of the report to the application security scanner (102, 200); receive a second message from the application security scanner (102, 200) to disable the dynamic taint module; and disable at least part of the dynamic taint module based on the second message; and the application security scanner (102, 200) further comprising an attack module; and an adjustment module to determine a scanning strategy by prioritizing the vulnerability candidate list in an attack conducted by the attack module on the application. disable the dynamic taint module; and disable at least part of the dynamic taint module based on the second message; and the application security scanner (102, 200) further comprising an attack module; and an adjustment module to determine a scanning strategy by prioritizing the vulnerability candidate list in an attack conducted by the attack module on the application.