Would it have to understand the difference? You could do pretty well with a crawler that detects such fields (by checking a simple increment, say) that then spi

Would it have to understand the difference? You could do pretty well with a crawler that detects such fields (by checking a simple increment, say) that then spits out URL/field combinations. Then you just need to scan through those and follow up on the ones that look like security holes.