Web app reverse engineering