Later archive addition

jÄk: Using Dynamic Analysis to Crawl and Test Modern Web Applications

Giancarlo Pellegrino, Constantin Tschurtz, Eric Bodden and Christian Rossow · 1 January 2015

A crawler that hooks client-side JavaScript APIs at runtime instead of parsing HTML with regular expressions, so registered event handlers, network calls and dynamically built URLs and forms are all discovered. Driving a scanner from the resulting navigation graph reached 86 percent more of the attack surface than four existing scanners across 13 applications.

Record

Researcher

Giancarlo Pellegrino, Constantin Tschurtz, Eric Bodden and Christian Rossow

Date

1 January 2015

In the archive

• Added to the 2015 archive after the original list was published

Tags

• dynamic-analysis
• tooling
• dom
• javascript
• detection
• measurement-study
• owasp-a09-2021

This page is the archive's own catalogue record. The research is the work of Giancarlo Pellegrino, Constantin Tschurtz, Eric Bodden and Christian Rossow, first published at the original source. Preserved copies are kept so the citation survives its host.