WDFuzz Artifact

This is artifact of paper WDFuzz: Effective Directed Fuzzing with Hierarchical Scheduling for Web Vulnerability Detection.

Please refer to quick-reproduction-guide.pdf to reproduce the results. Use cat WDFUZZ_part_* > WDFUZZ.tar.gz to extract the artifact. 

Directory Structure

• SA : Static Analysis

• INSTR : Instrumentation

• DF : Dynamic Fuzzing

• raw_data : Raw data of our experiments.

• witcher-dependencies : Our modified version of witcher for comparison experiments.

  Witcher (Java) has some implementation errors in sending POST requests, and Witcher do not support login of some applications. To fairly conduct comparison experiment, we've revised their codes. So, Witcher in witcher-dependencies is our revised version.

• dataset : Web applications of our dataset.

  For brief and quick reproduction of our experiment, see README.md in ./dataset.

   

Access this Artifact

Our work complies with the requirements of open science of the USENIX Security conference. However, as our work is a vulnerability detection tool, we have restricted the access permission of this artifact. If you need to access and download it, please contact the authors.