aio testking what attacks will his program expose the web application to?