Collected research

Talking About My Generation: Targeted DOM-based XSS Exploit Generation using Dynamic Data Flow Analysis

Souphiane Bensalim, David Klein, Thomas Barber and Martin Johns · ACM

Generates DOM XSS exploits using dynamic taint traces to identify replaceable URL ranges, preserve surrounding URL structure, and choose context-breaking payloads. The evaluation confirms 7,199 flows across 711 domains using a browser configured for legacy URL-encoding behavior.

Record

Researcher

Souphiane Bensalim, David Klein, Thomas Barber and Martin Johns

Published by

ACM

Format

Whitepaper

Topic

XSS

In the archive

• Collected in the 2021 research round

Tags

• xss
• dom
• dynamic-analysis
• tooling
• encoding
• owasp-a03-2021

This page is the archive's own catalogue record. The research is the work of Souphiane Bensalim, David Klein, Thomas Barber and Martin Johns, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 10 September 2026.