Web Vulnerabilities Methodology