A practical guide to help ethical hackers discover web application security flaws