Automated Web Application Security Evaluation