Application security testing (AST) techniques