Collected research

WAPTEC: Whitebox Analysis of Web Applications for Parameter Tampering Exploit Construction

Prithvi Bisht, Timothy Hinrichs, Nazari Skrupsky and V.N. Venkatakrishnan · cs.uic.edu

WAPTEC analyses a LAMP application's client form, its PHP execution trace and its MySQL schema together, expressing all three as first-order string constraints. It solves f_client for benign inputs, then negates it against f_server to construct parameter tampering exploits by construction.

Record

Researcher

Prithvi Bisht, Timothy Hinrichs, Nazari Skrupsky and V.N. Venkatakrishnan

Published by

cs.uic.edu

Format

Whitepaper

Topic

Other

In the archive

• Collected in the 2011 research round

Tags

• static-analysis
• dynamic-analysis
• formal-analysis
• tooling
• php
• database
• privilege-escalation
• owasp-a01-2021

This page is the archive's own catalogue record. The research is the work of Prithvi Bisht, Timothy Hinrichs, Nazari Skrupsky and V.N. Venkatakrishnan, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 14 August 2026.