{"id":"https://openalex.org/W6893244822","doi":"https://doi.org/10.5281/zenodo.15580726","title":"XSSky: Detecting XSS Vulnerabilities through Local Path-Persistent Fuzzing","display_name":"XSSky: Detecting XSS Vulnerabilities through Local Path-Persistent Fuzzing","publication_year":2025,"publication_date":"2025-06-06","ids":{"openalex":"https://openalex.org/W6893244822","doi":"https://doi.org/10.5281/zenodo.15580726"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.15580726","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.15580726","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Software"},"type":"software","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.15580726","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Shi, Youkun","orcid":"https://orcid.org/0009-0004-0763-4732"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shi, Youkun","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0009-0004-0763-4732","affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Zhang, Yuan","orcid":"https://orcid.org/0000-0003-0726-9996"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Yuan","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0003-0726-9996","affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Bai, Tianhao","orcid":"https://orcid.org/0009-0006-3761-784X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bai, Tianhao","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0009-0006-3761-784X","affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Xue, Feng","orcid":"https://orcid.org/0009-0001-2587-3479"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xue, Feng","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0009-0001-2587-3479","affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Dai, Jiarun","orcid":"https://orcid.org/0009-0002-5636-7808"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dai, Jiarun","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0009-0002-5636-7808","affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Liu, Fengyu","orcid":"https://orcid.org/0009-0009-4680-6513"},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Liu, Fengyu","raw_affiliation_strings":["Fudan University"],"raw_orcid":"https://orcid.org/0009-0009-4680-6513","affiliations":[{"raw_affiliation_string":"Fudan University","institution_ids":["https://openalex.org/I24943067"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Zhang, Lei","orcid":"https://orcid.org/0009-0004-3295-1991"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Lei","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0009-0004-3295-1991","affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Luo, Xiapu","orcid":"https://orcid.org/0000-0002-9082-3208"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Luo, Xiapu","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-9082-3208","affiliations":[]},{"author_position":"last","author":{"id":null,"display_name":"Yang, Min","orcid":"https://orcid.org/0000-0001-9714-5545"},"institutions":[{"id":"https://openalex.org/I24943067","display_name":"Fudan University","ror":"https://ror.org/013q1eq08","country_code":"CN","type":"education","lineage":["https://openalex.org/I24943067"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yang, Min","raw_affiliation_strings":["Fudan University"],"raw_orcid":"https://orcid.org/0000-0001-9714-5545","affiliations":[{"raw_affiliation_string":"Fudan University","institution_ids":["https://openalex.org/I24943067"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":true,"primary_topic":{"id":"https://openalex.org/T10223","display_name":"Microgrid Control and Optimization","score":0.18299999833106995,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10223","display_name":"Microgrid Control and Optimization","score":0.18299999833106995,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10175","display_name":"Advanced DC-DC Converters","score":0.13809999823570251,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11102","display_name":"HVDC Systems and Fault Protection","score":0.07609999924898148,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cross-site-scripting","display_name":"Cross-site scripting","score":0.8166000247001648},{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.6100000143051147},{"id":"https://openalex.org/keywords/secure-coding","display_name":"Secure coding","score":0.6039999723434448},{"id":"https://openalex.org/keywords/permission","display_name":"Permission","score":0.5918999910354614},{"id":"https://openalex.org/keywords/artifact","display_name":"Artifact (error)","score":0.5742999911308289},{"id":"https://openalex.org/keywords/directory","display_name":"Directory","score":0.5127999782562256},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.47699999809265137},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.4542999863624573},{"id":"https://openalex.org/keywords/web-application","display_name":"Web application","score":0.38749998807907104}],"concepts":[{"id":"https://openalex.org/C39569185","wikidata":"https://www.wikidata.org/wiki/Q371199","display_name":"Cross-site scripting","level":5,"score":0.8166000247001648},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7513999938964844},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6327999830245972},{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.6100000143051147},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.6039999723434448},{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.5918999910354614},{"id":"https://openalex.org/C2779010991","wikidata":"https://www.wikidata.org/wiki/Q2720909","display_name":"Artifact (error)","level":2,"score":0.5742999911308289},{"id":"https://openalex.org/C2777683733","wikidata":"https://www.wikidata.org/wiki/Q201456","display_name":"Directory","level":2,"score":0.5127999782562256},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.47699999809265137},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4542999863624573},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.4018000066280365},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.38749998807907104},{"id":"https://openalex.org/C2780154274","wikidata":"https://www.wikidata.org/wiki/Q7126717","display_name":"Download","level":2,"score":0.3840000033378601},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.3711000084877014},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.3560999929904938},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.33570000529289246},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.3215999901294708},{"id":"https://openalex.org/C77109596","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Application security","level":5,"score":0.32030001282691956},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.29499998688697815},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.28519999980926514},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.28189998865127563},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.2784000039100647},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.2750000059604645},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.26350000500679016},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.2581999897956848},{"id":"https://openalex.org/C2777632111","wikidata":"https://www.wikidata.org/wiki/Q1937518","display_name":"Reservation","level":2,"score":0.2551000118255615},{"id":"https://openalex.org/C47487241","wikidata":"https://www.wikidata.org/wiki/Q5227230","display_name":"Data access","level":2,"score":0.2538999915122986}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.5281/zenodo.15580726","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.15580726","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Software"}],"best_oa_location":{"id":"doi:10.5281/zenodo.15580726","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.15580726","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Software"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"XSSky":[0],"Artifact":[1,62],"This":[2],"is":[3,81],"artifact":[4],"of":[5,25,44,69,72,92],"paper":[6],"XSSky:":[7],"Detecting":[8],"XSS":[9],"Vulnerabilities":[10],"through":[11],"Local":[12],"Path-Persistent":[13],"Fuzzing.":[14],"Please":[15],"refer":[16],"to":[17,19,57,98],"README.md":[18],"understand":[20],"the":[21,26,41,54,67,73,89,105],"setup":[22],"and":[23,100],"usage":[24],"artifact.":[27,94],"Directory":[28],"Structure":[29],"PUT_extractor":[30],":":[31,49],"The":[32,50],"module":[33,51],"that":[34,52],"extracts":[35],"Program":[36],"Under":[37],"Testing":[38],"(PUT)":[39],"from":[40],"source":[42],"code":[43],"target":[45],"web":[46],"applications.":[47],"PUT_fuzzer":[48],"fuzzes":[53],"extracted":[55],"PUTs":[56],"discover":[58],"vulnerabilities.":[59],"Access":[60],"this":[61,93],"Our":[63],"work":[64,80],"complies":[65],"with":[66],"requirements":[68],"open":[70],"science":[71],"USENIX":[74],"Security":[75],"conference.":[76],"However,":[77],"as":[78],"our":[79],"a":[82],"vulnerability":[83],"detection":[84],"tool,":[85],"we":[86],"have":[87],"restricted":[88],"access":[90,99],"permission":[91],"If":[95],"you":[96],"need":[97],"download":[101],"it,":[102],"please":[103],"contact":[104],"authors.":[106]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2025-10-10T00:00:00"}