SMS: Hacking exposed web applications