Automatic extraction of indicators of compromise for web applications