Collected research

The Diviner — Black-box Inference of Server-side Data Flow

Shay Chen and Eran Tamari · Security Tools Benchmarking · 30 July 2012

A ZAP extension varies inputs, request history, authentication and sessions, then follows effects across pages. Repeating a scenario without its input step distinguishes session-scoped from persistent effects. It turns observations into data-flow maps and hypothetical code to guide manual testing.

Record

Researcher

Shay Chen and Eran Tamari

Published by

Security Tools Benchmarking

Date

30 July 2012

Topic

Server

In the archive

• Collected in the 2012 research round

Related sources

• Source Code Divination
• Temporal Session Race Conditions (TSRC) — September 2011 presentation Slides

Tags

• tooling
• dynamic-analysis
• proxy

This page is the archive's own catalogue record. The research is the work of Shay Chen and Eran Tamari, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 11 September 2026.