A web page contains some information and any number of
HTML elements like forms. Each form includes some input
elements which are filled by users. The data provided by user
through navigating are gathered and submitted to the server.
The target of the submit link is always a dynamic page. The
dynamic pages are different in respect to the input values, and
they may differ from one value to another. Suppose a form
that gathers user interests, and shows additional information
about his interest. For example, if user interest is sport, it
shows a page containing additional information about sport.
Consequently, for exploiting all paths of web application, it
should produce all of the values that input variables could get.
Web exploiting process is divided into two phases, as follows: