Collected research

jÄk: Using Dynamic Analysis to Crawl and Test Modern Web Applications

Giancarlo Pellegrino, Constantin Tschurtz, Eric Bodden and Christian Rossow · publications.cispa.saarland · 1 January 2015

A crawler that hooks client-side JavaScript APIs at runtime instead of parsing HTML with regular expressions, so registered event handlers, network calls and dynamically built URLs and forms are all discovered. Driving a scanner from the resulting navigation graph reached 86 percent more of the attack surface than four existing scanners across 13 applications.

Record

Researcher

Giancarlo Pellegrino, Constantin Tschurtz, Eric Bodden and Christian Rossow

Published by

publications.cispa.saarland

Date

1 January 2015

Topic

Other

In the archive

• Collected in the 2015 research round

Tags

• dynamic-analysis
• tooling
• dom
• javascript
• detection
• measurement-study
• owasp-a09-2021

This page is the archive's own catalogue record. The research is the work of Giancarlo Pellegrino, Constantin Tschurtz, Eric Bodden and Christian Rossow, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 9 August 2026.