i have been working as a cyber security for 2 years and i can test any web application if it has a sql injection or xss vulnerability or broken access control