The purpose of this thesis is to present a new tool for detecting common web attacks that lead to web application information disclosure, primarily through improper authentication and session management. It provides a ...