SMS versenden: Sniping at web applications to discover input-handling vulnerabilities