Which phase involves finding vulnerabilities in a web application?

a. Foot printing and Reconnaissance
b. Maintaining Access
c. Vulnerability Analysis
d. System Hacking