Discovering security vulnerabilities and leaks in ASP.NET websites. - Huyam Al-Amro; Eyas El-Qawasmeh (CyberSec, 2012)