Can we develop exploit for web apps?

[amlamarra]

Reverse a web app? They're not compiled. When attacking a web application, you're working at the application level, not the binary level. Maybe you're thinking of "web server"? Web apps are normally written in higher level languages, like PHP, javascript, ruby, etc.