How to Break Web Software