Collected research

EvoCrawl: Exploring Web Application Code and State using Evolutionary Search

Xiangyu Guo, Akshay Kawlay, Eric Liu and David Lie · NDSS Symposium

EvoCrawl crawls web applications using evolutionary search over sequences of interactions, so it satisfies field and format constraints and reaches server states earlier scanners miss: 59 percent more code coverage and five times more successful form submissions. With IDOR and XSS scanners it found eight zero-days in widely used applications.

Record

Researcher

Xiangyu Guo, Akshay Kawlay, Eric Liu and David Lie

Published by

NDSS Symposium

Topic

Other

In the archive

• Collected in the 2025 research round

Related sources

• NDSS 2025 - EvoCrawl: Exploring Web Application Code and State using Evolutionary Search
• NDSS 2025 - EvoCrawl: Exploring Web Application Code and State using Evolutionary Search

Tags

• idor
• xss
• tooling
• fuzzing
• dynamic-analysis
• wordpress
• gitlab
• javascript
• owasp-a01-2021
• owasp-a03-2021

This page is the archive's own catalogue record. The research is the work of Xiangyu Guo, Akshay Kawlay, Eric Liu and David Lie, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 19 August 2026.