> Add a script on a website that will test each application from your list.

This means exploitation requires Javascript, right? Tor browser users should have it disabled at all times.