Using W3af for vulnerability assessment