Collected research

NAVEX: Precise and Scalable Exploit Generation for Dynamic Web Applications

Abeer Alhuzali, Rigel Gjomemo, Birhanu Eshete and V.N. Venkatakrishnan · www-personal.umd.umich.edu

NAVEX locates vulnerable sinks in PHP applications with a sanitization-aware code property graph, then crawls and concolically executes the deployed application to build a navigation graph so a constraint solver can emit the exact sequence of HTTP requests that reaches the sink. It produced 204 working SQL injection, XSS and execution-after-redirect exploits across 3.2M lines of code.

Record

Researcher

Abeer Alhuzali, Rigel Gjomemo, Birhanu Eshete and V.N. Venkatakrishnan

Published by

www-personal.umd.umich.edu

Topic

Other

In the archive

• Collected in the 2018 research round

Related sources

• USENIX Security '18 - NAVEX: Precise and Scalable Exploit Generation for Dynamic Web Applications

Tags

• sqli
• xss
• injection
• php
• static-analysis
• dynamic-analysis
• tooling
• owasp-a03-2021

This page is the archive's own catalogue record. The research is the work of Abeer Alhuzali, Rigel Gjomemo, Birhanu Eshete and V.N. Venkatakrishnan, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 14 August 2026.