Web-service-specific vulnerability scanners