Co
m
pu
t
er
Science
a
nd
I
nfo
r
m
a
t
io
n T
ec
hn
o
lo
g
ies
Vo
l.
7
,
No
.
1
,
Ma
r
c
h
2
0
2
6
,
p
p
.
1
0
~
1
9
I
SS
N:
2722
-
3
2
2
1
,
DOI
:
1
0
.
1
1
5
9
1
/csi
t
.
v
7
i
1
.
pp
1
0
-
1
9
10
J
o
ur
na
l ho
m
ep
a
g
e
:
h
ttp
:
//ia
e
s
p
r
ime.
co
m/in
d
ex
.
p
h
p
/csi
t
Ada
W
eb
:
a
stack
-
a
da
ptive framew
o
rk f
o
r auto
ma
te
d web
-
v
ulnera
bility a
ss
ess
ment
Sy
ed
Am
a
n Sha
h
1
,
Va
is
ha
li
K
um
a
r
2
1
S
c
h
o
o
l
o
f
C
o
m
p
u
t
e
r
S
c
i
e
n
c
e
E
n
g
i
n
e
e
r
i
n
g
a
n
d
A
p
p
l
i
c
a
t
i
o
n
s
,
D
.
Y
P
a
t
i
l
I
n
t
e
r
n
a
t
i
o
n
a
l
U
n
i
v
e
r
si
t
y
,
P
u
n
e
,
I
n
d
i
a
2
D
e
p
a
r
t
me
n
t
o
f
C
o
m
p
u
t
e
r
En
g
i
n
e
e
r
i
n
g
,
M
I
T
A
c
a
d
e
m
y
o
f
E
n
g
i
n
e
e
r
i
n
g
,
P
u
n
e
,
I
n
d
i
a
Art
icle
I
nfo
AB
S
T
RAC
T
A
r
ticle
his
to
r
y:
R
ec
eiv
ed
J
u
n
1
0
,
2
0
2
5
R
ev
is
ed
Oct
1
0
,
2
0
2
5
Acc
ep
ted
No
v
2
8
,
2
0
2
5
A
d
a
W
eb
wa
s
a
c
o
n
f
i
g
u
r
a
t
i
o
n
-
d
r
i
v
e
n
f
r
a
m
e
w
o
r
k
t
h
a
t
a
u
t
o
m
a
t
e
d
w
e
b
-
v
u
l
n
e
r
a
b
i
l
i
t
y
a
s
s
e
ss
m
e
n
t
t
h
r
o
u
g
h
f
o
u
r
s
t
a
g
e
s
:
t
e
c
h
n
o
l
o
g
y
f
i
n
g
e
r
p
r
i
n
t
i
n
g
,
c
r
a
w
le
r
s
e
le
c
t
i
o
n
,
e
x
p
l
o
i
t
e
x
e
c
u
t
i
o
n
,
a
n
d
i
n
c
r
e
m
e
n
t
a
l
re
p
o
r
t
i
n
g
.
A
W
a
p
p
a
l
y
z
e
r
p
r
o
b
e
i
d
e
n
t
i
f
i
e
d
t
h
e
a
p
p
l
i
c
a
t
i
o
n
s
t
a
c
k
a
n
d
t
r
i
g
g
e
r
e
d
a
m
a
t
c
h
i
n
g
c
r
a
w
le
r
—
h
y
p
e
r
t
e
x
t
p
r
e
p
r
o
c
e
s
s
o
r
(
P
H
P
)
,
AS
P
.
N
E
T
,
N
o
d
e
J
S
,
o
r
a
g
e
n
e
ra
l
fa
l
l
b
a
c
k
—
c
a
p
a
b
l
e
o
f
b
o
t
h
u
n
a
u
t
h
e
n
t
i
c
a
t
e
d
a
n
d
c
r
e
d
e
n
t
i
a
l
-
b
a
se
d
t
r
a
v
e
rs
a
l
.
Di
s
c
o
v
e
r
e
d
u
n
i
f
o
r
m
r
e
s
o
u
r
c
e
l
o
c
a
t
o
r
(
U
R
L)
f
e
d
t
h
r
e
e
e
x
p
l
o
i
t
m
o
d
u
l
e
s
:
a
s
q
l
m
a
p
-
i
n
t
e
g
r
a
t
e
d
s
t
r
u
c
t
u
r
e
d
q
u
e
r
y
l
a
n
g
u
a
g
e
i
n
j
e
c
t
i
o
n
(
S
Q
L
i
)
i
n
j
e
c
t
i
o
n
t
e
s
t
e
r
,
a
c
u
s
t
o
m
r
e
f
l
e
c
t
i
v
e
c
r
o
s
s
-
s
i
te
sc
r
i
p
t
i
n
g
(
X
S
S
)
i
n
j
e
c
t
o
r
,
a
n
d
a
P
y
t
h
o
n
-
d
e
s
e
r
i
a
l
iz
a
t
i
o
n
m
o
d
u
l
e
t
h
a
t
u
s
e
d
a
B
a
s
e
6
4
-
e
n
c
o
d
e
d
p
i
c
k
l
e
p
a
y
l
o
a
d
t
o
o
p
e
n
a
n
i
n
t
e
r
a
c
t
i
v
e
r
e
v
e
r
s
e
s
h
e
l
l
.
E
a
c
h
m
o
d
u
l
e
w
r
o
t
e
i
m
m
e
d
i
a
te
j
a
v
a
s
c
r
i
p
t
o
b
j
e
c
t
n
o
t
a
t
i
o
n
(
J
S
O
N
)
r
e
c
o
r
d
s
c
o
n
t
a
i
n
i
n
g
U
R
L
,
p
a
r
a
m
e
t
e
r
,
p
a
y
l
o
a
d
,
a
n
d
e
v
i
d
e
n
c
e
,
w
h
i
c
h
a
l
l
o
w
e
d
r
e
a
l
-
t
im
e
a
n
a
l
y
s
i
s
a
n
d
p
r
e
se
r
v
e
d
d
a
t
a
f
o
r
a
u
d
i
t
.
E
m
p
i
r
i
c
a
l
e
v
a
l
u
a
t
i
o
n
o
n
f
o
u
r
d
e
l
i
b
e
r
a
te
l
y
v
u
l
n
e
r
a
b
l
e
b
e
n
c
h
m
a
r
k
s
s
h
o
w
s
t
h
a
t
A
d
a
W
e
b
c
u
t
s
m
a
n
u
a
l
t
r
ia
g
e
t
i
m
e
b
y
5
2
%
a
n
d
e
l
i
m
i
n
a
te
s
f
a
l
se
‑
n
e
g
a
t
i
v
e
c
a
se
s
t
h
a
t
d
e
f
e
a
t
g
e
n
e
r
i
c
s
c
a
n
n
e
r
s
,
m
a
k
i
n
g
i
t
a
d
r
o
p
‑
i
n
u
p
g
r
a
d
e
f
o
r
D
e
v
S
e
c
O
p
s
p
i
p
e
l
i
n
e
s
.
T
h
i
s
f
r
a
m
e
w
o
r
k
r
e
d
u
c
e
s
m
a
n
u
a
l
v
a
l
i
d
a
t
i
o
n
e
f
f
o
r
t
a
n
d
e
l
im
i
n
a
t
e
s
fa
l
s
e
n
e
g
a
t
i
v
e
s
b
y
le
v
e
r
a
g
i
n
g
s
t
a
c
k
-
a
l
i
g
n
e
d
p
a
y
l
o
a
d
s
a
n
d
a
u
t
h
e
n
t
i
c
a
t
e
d
s
c
a
n
n
i
n
g
.
K
ey
w
o
r
d
s
:
Ad
ap
tiv
e
cr
awlin
g
C
r
o
s
s
s
ite
s
cr
ip
tin
g
S
t
r
u
c
t
u
r
e
d
q
u
e
r
y
l
a
n
g
u
a
g
e
i
n
j
e
c
t
i
o
n
Vu
ln
er
ab
ilit
y
s
ca
n
n
in
g
W
eb
s
ec
u
r
ity
T
h
is i
s
a
n
o
p
e
n
a
c
c
e
ss
a
rticle
u
n
d
e
r th
e
CC B
Y
-
SA
li
c
e
n
se
.
C
o
r
r
e
s
p
o
nd
ing
A
uth
o
r
:
Sy
ed
Am
an
Sh
ah
Sch
o
o
l o
f
C
o
m
p
u
ter
Scien
ce
E
n
g
in
ee
r
in
g
an
d
Ap
p
licatio
n
s
,
D.
Y
Patil I
n
ter
n
atio
n
al
Un
iv
e
r
s
ity
Ak
u
r
d
i,
Pu
n
e,
I
n
d
ia
E
m
ail:
2
0
2
1
0
8
0
2
0
1
7
@
d
y
p
iu
.
ac
.
in
1.
I
NT
RO
D
UCT
I
O
N
Ad
aWeb
ad
d
r
ess
es
th
e
g
r
o
wi
n
g
s
ec
u
r
ity
ch
allen
g
e
p
o
s
ed
b
y
m
o
d
er
n
web
ap
p
licatio
n
s
th
at
b
len
d
m
u
ltip
le
tech
n
o
lo
g
y
s
tack
s
an
d
p
r
o
tect
lar
g
e
p
o
r
tio
n
s
o
f
f
u
n
ctio
n
ality
b
eh
in
d
au
th
en
ticatio
n
s
cr
ee
n
s
.
C
o
n
v
en
tio
n
al
d
y
n
am
ic
s
ca
n
n
er
s
—
s
u
ch
as
o
p
en
web
a
p
p
licatio
n
s
ec
u
r
ity
p
r
o
ject
ze
d
attac
k
p
r
o
x
y
(
OW
ASP
Z
A
P
)
an
d
w3
af
—
ten
d
to
ap
p
l
y
o
n
e
-
s
ize
-
f
its
-
all
h
eu
r
is
tics
,
o
v
er
lo
o
k
i
n
g
f
r
am
ewo
r
k
-
s
p
ec
if
ic
en
d
p
o
i
n
ts
an
d
s
tatef
u
l
r
o
u
tes
[
1
]
.
R
ec
en
t
r
esear
ch
o
n
s
tack
-
a
war
e
cr
awlin
g
h
as
im
p
r
o
v
e
d
c
o
v
er
ag
e
f
o
r
s
in
g
le
-
f
r
am
ewo
r
k
s
ites
b
u
t
s
till
f
alls
s
h
o
r
t
wh
en
ap
p
licatio
n
s
m
i
x
h
y
p
e
r
tex
t
p
r
e
p
r
o
ce
s
s
o
r
(
PH
P
)
f
r
o
n
t
-
e
n
d
s
with
No
d
eJS
b
ac
k
-
en
d
s
o
r
em
b
e
d
ASP.NE
T
r
eso
u
r
ce
s
in
leg
ac
y
p
o
r
tals
[
2
]
,
[
3
]
.
Desp
ite
a
r
ich
ec
o
s
y
s
tem
o
f
d
y
n
am
ic
s
ca
n
n
er
s
(
e.
g
.
B
u
r
p
s
u
ite
co
m
m
u
n
ity
,
OW
ASP Z
AP,
w3
af
)
,
th
e
s
tate‑
o
f
‑
p
r
ac
tice
r
em
ain
s
s
tack
‑
ag
n
o
s
tic:
a
s
in
g
le
h
eu
r
is
tic
cr
awle
r
an
d
a
s
tatic
p
ay
lo
ad
co
r
p
u
s
ar
e
ap
p
lied
to
ev
er
y
tar
g
et
.
T
h
is
m
is
m
ap
o
f
“o
n
e‑
s
ize‑
f
its
‑
all”
lo
g
ic
to
h
y
b
r
id
PHP +
No
d
eJS
f
r
o
n
t‑
e
n
d
s
o
r
au
th
e
n
ticated
ASP.NE
T
d
ash
b
o
ar
d
s
ca
u
s
e
th
r
ee
ch
r
o
n
ic
g
ap
s
:
i)
p
o
o
r
co
v
er
ag
e
o
f
f
r
am
ewo
r
k
‑
s
p
ec
if
ic
r
o
u
tes,
ii)
f
ailu
r
e
to
r
eu
s
e
s
tatef
u
l
s
e
s
s
io
n
s
,
an
d
iii
)
ted
io
u
s
m
an
u
al
v
alid
atio
n
wh
er
e
g
en
er
ic
p
ay
l
o
ad
s
m
is
‑
f
ir
e.
Ad
aWeb
clo
s
es
th
ese
g
ap
s
b
y
f
in
g
er
p
r
in
tin
g
t
h
e
s
tack
,
lo
ad
in
g
a
m
atch
ed
c
r
awle
r
,
an
d
s
tr
ea
m
in
g
jav
ascr
ip
t
o
b
ject
n
o
tatio
n
(
J
SON
)
ev
id
en
ce
in
r
ea
l‑
tim
e
—
an
ap
p
r
o
ac
h
n
o
t a
d
d
r
ess
ed
b
y
p
r
i
o
r
wo
r
k
.
Evaluation Warning : The document was created with Spire.PDF for Python.
C
o
m
p
u
t Sci
I
n
f
T
ec
h
n
o
l
I
SS
N:
2722
-
3
2
2
1
A
d
a
Web
:
a
s
ta
ck
-
a
d
a
p
tive
fr
a
mewo
r
k
fo
r
a
u
to
ma
ted
w
eb
-
vu
ln
era
b
ilit
y
a
s
s
ess
men
t
…
(
S
ye
d
A
ma
n
S
h
a
h
)
11
T
h
e
c
o
r
e
p
r
o
b
l
em
is
tw
o
-
f
o
l
d
.
F
ir
s
t,
g
e
n
er
ic
c
r
a
wle
r
s
s
el
d
o
m
u
n
d
er
s
ta
n
d
s
ess
i
o
n
t
o
k
e
n
s
s
u
c
h
as
ASP.N
E
T
V
I
E
W
S
T
AT
E
o
r
J
a
v
aS
cr
ip
t
-
d
r
i
v
e
n
r
o
u
ti
n
g
i
n
s
in
g
le
-
p
ag
e
a
p
p
lic
ati
o
n
s
,
c
a
u
s
i
n
g
t
h
e
m
t
o
m
is
s
a
tta
ck
s
u
r
f
a
ce
h
i
d
d
en
b
e
h
i
n
d
d
y
n
am
i
c
li
n
k
s
.
Se
co
n
d
,
e
x
p
l
o
it
e
n
g
i
n
e
s
th
at
f
i
r
e
t
h
e
s
a
m
e
p
a
y
l
o
a
d
s
e
t
at
e
v
e
r
y
en
d
p
o
i
n
t
r
a
r
el
y
a
ch
ie
v
e
d
e
ep
p
e
n
e
tr
ati
o
n
,
p
a
r
ti
c
u
la
r
l
y
wh
e
n
au
th
e
n
ti
c
ati
o
n
o
r
f
r
am
ew
o
r
k
-
s
p
e
cif
ic
d
ef
en
s
es
ar
e
in
p
l
ac
e
.
T
h
ese
li
m
it
ati
o
n
s
p
r
o
lo
n
g
m
a
n
u
al
e
f
f
o
r
t
a
n
d
l
ea
v
e
c
r
it
ica
l
s
tr
u
ct
u
r
e
d
q
u
e
r
y
l
a
n
g
u
ag
e
i
n
j
e
cti
o
n
(
SQL
i)
,
cr
o
s
s
-
s
ite
s
c
r
i
p
ti
n
g
(
XS
S)
,
a
n
d
r
e
m
o
te
co
d
e
ex
ec
u
t
io
n
(
R
C
E
)
f
la
ws
u
n
d
ete
cte
d
.
I
n
c
o
n
tr
ast
t
o
tr
a
d
i
ti
o
n
al
t
o
o
ls
t
h
at
ap
p
l
y
s
t
ati
c,
o
n
e
-
s
i
ze
-
f
its
-
all
lo
g
i
c,
A
d
aWe
b
a
d
a
p
ts
d
y
n
am
i
ca
l
ly
t
o
t
h
e
t
ar
g
et
’
s
te
c
h
n
o
lo
g
y
s
t
ac
k
,
a
n
d
au
t
h
en
tic
ati
o
n
c
o
n
te
x
t
—
c
lo
s
in
g
lo
n
g
-
s
ta
n
d
i
n
g
g
a
p
s
i
n
co
v
e
r
a
g
e
,
s
ess
i
o
n
h
a
n
d
li
n
g
,
a
n
d
r
ea
l
-
t
im
e
r
e
p
o
r
t
in
g
.
A
d
a
W
e
b
o
f
f
e
r
s
a
s
ta
c
k
-
a
d
a
p
t
i
v
e
,
e
n
d
-
to
-
e
n
d
w
o
r
k
f
l
o
w
t
h
at
c
lo
s
e
s
t
h
is
g
a
p
.
I
t
b
e
g
i
n
s
b
y
f
i
n
g
e
r
p
r
i
n
t
i
n
g
t
h
e
t
a
r
g
e
t
’
s
r
u
n
t
i
m
e
e
n
v
i
r
o
n
m
en
t
w
i
t
h
W
a
p
p
al
y
z
e
r
,
t
h
e
n
d
y
n
a
m
i
c
a
l
l
y
l
o
a
d
s
a
c
r
a
w
l
e
r
t
u
n
e
d
f
o
r
P
H
P
,
A
SP
.
N
E
T
,
N
o
d
e
J
S
,
o
r
a
g
e
n
e
r
ic
f
a
ll
b
a
c
k
.
L
i
n
k
s
h
a
r
v
es
t
e
d
i
n
r
e
a
l
t
i
m
e
a
r
e
f
e
d
t
o
t
h
r
e
e
s
p
e
c
i
al
i
z
e
d
e
x
p
l
o
i
t
m
o
d
u
l
es
—
s
q
l
m
a
p
f
o
r
S
Q
L
i
[
4
]
,
a
r
e
f
l
e
ct
i
v
e
-
XS
S i
n
j
e
c
t
o
r
,
a
n
d
a
c
o
o
k
i
e
-
b
as
e
d
P
y
t
h
o
n
d
e
s
e
r
i
al
i
z
at
i
o
n
p
a
y
l
o
a
d
—
w
h
i
c
h
l
o
g
e
v
i
d
e
n
c
e
i
n
s
t
a
n
ta
n
e
o
u
s
l
y
t
o
J
S
ON
.
T
h
is
c
h
a
i
n
e
d
p
r
o
c
ess
t
r
a
n
s
f
o
r
m
s
r
e
c
o
n
n
a
i
s
s
a
n
c
e
,
e
x
p
l
o
it
a
t
i
o
n
,
an
d
r
e
p
o
r
t
i
n
g
i
n
t
o
a
s
i
n
g
l
e
a
u
t
o
m
at
e
d
l
o
o
p
s
u
it
a
b
l
e
f
o
r
t
i
m
e
-
c
o
n
s
t
r
ai
n
e
d
a
s
s
es
s
m
en
t
s
.
T
h
e
c
o
n
t
r
i
b
u
ti
o
n
s
o
f
t
h
is
w
o
r
k
a
r
e
t
h
r
e
e
-
f
o
l
d
:
i
)
a
t
e
c
h
n
o
l
o
g
y
-
a
l
i
g
n
e
d
c
r
a
w
li
n
g
s
t
r
a
t
e
g
y
t
h
a
t
i
n
c
r
e
as
es
r
e
a
c
h
a
b
l
e
e
n
d
p
o
i
n
t
s
b
y
u
p
t
o
4
2
%
o
v
e
r
g
e
n
e
r
i
c
s
c
a
n
n
e
r
s
,
i
i
)
a
m
o
d
u
l
a
r
e
x
p
l
o
i
t
la
y
e
r
t
h
at
d
e
li
v
e
r
s
z
e
r
o
-
f
a
l
s
e
-
p
o
s
it
i
v
e
d
et
e
c
ti
o
n
o
f
S
Q
L
i
,
X
SS
,
a
n
d
d
e
s
e
r
i
a
li
z
a
ti
o
n
-
b
a
s
e
d
R
C
E
a
cr
o
s
s
a
u
t
h
e
n
ti
c
a
t
e
d
a
n
d
u
n
a
u
t
h
e
n
t
i
c
a
t
e
d
r
o
u
t
es
,
a
n
d
i
i
i
)
a
n
i
n
c
r
e
m
e
n
t
a
l
J
S
ON
r
e
p
o
r
t
i
n
g
m
e
c
h
a
n
i
s
m
t
h
a
t
e
n
ab
l
e
s
a
n
a
l
y
s
ts
t
o
t
r
i
a
g
e
f
i
n
d
i
n
g
s
d
u
r
i
n
g
a
l
i
v
e
s
c
a
n
,
s
h
o
r
t
e
n
i
n
g
r
e
m
e
d
i
a
t
i
o
n
c
y
cl
es
a
n
d
f
a
c
i
l
i
t
at
i
n
g
i
n
t
e
g
r
at
i
o
n
w
ith
c
o
n
t
i
n
u
o
u
s
-
i
n
t
e
g
r
a
t
i
o
n
/
c
o
n
ti
n
u
o
u
s
-
d
e
p
l
o
y
m
e
n
t
p
i
p
e
l
i
n
es
[
5
]
,
[
6
]
.
2.
M
E
T
H
O
D
T
h
e
r
esear
ch
f
o
llo
wed
a
f
i
v
e
-
s
tep
wo
r
k
f
lo
w
c
o
n
s
is
tin
g
o
f
tech
n
o
lo
g
y
d
etec
tio
n
,
s
tack
-
s
p
ec
if
ic
cr
awlin
g
,
au
to
m
ate
d
ex
p
lo
it
atio
n
,
in
cr
em
e
n
tal
r
ep
o
r
ti
n
g
,
an
d
em
p
ir
ical
e
v
alu
atio
n
.
T
h
is
wo
r
k
f
lo
w
as
p
r
esen
ted
in
Fig
u
r
e
1
is
d
esig
n
ed
to
en
s
u
r
e
th
at
v
u
ln
er
ab
ili
ty
d
is
co
v
er
y
is
b
o
th
s
y
s
tem
atic
an
d
ad
ap
tab
le
to
d
if
f
er
en
t
web
tech
n
o
lo
g
y
s
tack
s
.
T
o
g
eth
er
,
th
ese
s
tag
es
f
o
r
m
a
clo
s
ed
-
lo
o
p
m
eth
o
d
o
lo
g
y
in
wh
ich
r
ec
o
n
n
aiss
an
ce
,
e
x
p
lo
itatio
n
,
an
d
r
e
p
o
r
tin
g
p
r
o
ce
ed
in
a
tig
h
tly
in
teg
r
ated
a
n
d
r
ep
ea
tab
l
e
m
an
n
e
r
,
en
a
b
lin
g
s
y
s
tem
atic
ev
alu
atio
n
ac
r
o
s
s
h
eter
o
g
en
eo
u
s
web
-
ap
p
licatio
n
s
tack
s
.
2
.
1
.
Sy
s
t
e
m
a
rc
hite
ct
ure
Ad
aWeb
co
m
p
r
is
es
f
o
u
r
au
to
n
o
m
o
u
s
lay
er
s
th
at
co
m
m
u
n
ic
ate
th
r
o
u
g
h
well
-
d
e
f
in
ed
class
in
ter
f
ac
es,
en
ab
lin
g
m
o
d
u
lar
d
e
v
elo
p
m
e
n
t
an
d
ex
ten
s
ib
ilit
y
.
E
ac
h
lay
er
is
r
esp
o
n
s
ib
le
f
o
r
a
d
is
tin
ct
p
h
ase
o
f
th
e
ass
es
s
m
en
t
p
ip
elin
e,
in
clu
d
in
g
tech
n
o
lo
g
y
d
etec
tio
n
,
s
tack
-
s
p
ec
if
ic
cr
awlin
g
,
ex
p
l
o
it
ex
ec
u
tio
n
,
an
d
r
ep
o
r
tin
g
.
T
h
e
i
n
teg
r
ated
a
r
ch
i
tectu
r
e
o
f
Ad
aWeb
is
illu
s
tr
ated
in
Fig
u
r
es 1
(
a)
an
d
1
(
b
)
.
(
a)
(
b
)
Fig
u
r
e
1
.
T
h
e
wo
r
k
f
lo
w
o
f
(
a)
p
r
e
-
ex
p
lo
itatio
n
p
h
ase
an
d
(
b
)
ex
p
lo
itatio
n
an
d
r
ep
o
r
tin
g
p
h
a
s
e
Evaluation Warning : The document was created with Spire.PDF for Python.
I
SS
N
:
2
7
2
2
-
3
2
2
1
C
o
m
p
u
t Sci
I
n
f
T
ec
h
n
o
l
,
Vo
l.
7
,
No
.
1
,
Ma
r
ch
2
0
2
6
:
1
0
-
1
9
12
i)
T
h
e
tech
n
o
l
o
g
y
d
etec
tio
n
m
o
d
u
le
in
Ad
aWeb
is
im
p
le
m
en
ted
as
a
lig
h
tweig
h
t
wr
ap
p
er
ar
o
u
n
d
W
ap
p
aly
ze
r
th
at
p
er
f
o
r
m
s
a
s
in
g
le
HT
T
P
r
eq
u
est
to
th
e
tar
g
et
ap
p
licatio
n
.
T
h
e
m
o
d
u
le
an
al
y
ze
s
r
esp
o
n
s
e
h
ea
d
e
r
s
,
HT
ML
co
n
ten
t,
em
b
ed
d
ed
s
cr
ip
t
im
p
o
r
ts
,
an
d
f
av
ico
n
h
ash
es
to
in
f
er
t
h
e
u
n
d
er
ly
in
g
web
tech
n
o
lo
g
y
s
tack
,
p
r
o
d
u
c
in
g
a
r
an
k
ed
lis
t
o
f
ca
n
d
i
d
ate
tech
n
o
lo
g
ies
s
u
ch
as
PHP,
A
SP
.
NE
T
,
an
d
No
d
eJS
.
T
h
e
in
ter
n
al
o
p
e
r
atio
n
o
f
th
is
m
o
d
u
le,
in
cl
u
d
in
g
f
ea
tu
r
e
ex
t
r
ac
tio
n
an
d
tech
n
o
lo
g
y
class
if
icatio
n
,
is
illu
s
tr
ated
in
Fig
u
r
e
2
[
7
]
.
Fig
u
r
e
2
.
W
o
r
k
f
lo
w
o
f
th
e
tec
h
n
o
lo
g
y
d
etec
tio
n
m
o
d
u
le
in
Ad
aWeb
ii)
C
r
awle
r
lay
er
–
b
ased
o
n
th
e
d
etec
ted
tech
n
o
l
o
g
y
s
tack
,
t
h
e
co
n
tr
o
ller
d
y
n
am
ically
i
n
s
tan
tiates
o
n
e
o
f
f
o
u
r
c
r
awle
r
class
es
tailo
r
ed
to
th
e
tar
g
et
en
v
ir
o
n
m
en
t.
T
h
e
PHP
cr
awle
r
m
ain
tain
s
s
es
s
io
n
s
tate
v
ia
PHPS
E
S
SID
,
p
ar
s
es
s
er
v
er
-
g
en
er
ated
h
y
p
er
lin
k
s
,
an
d
en
f
o
r
ce
s
co
n
f
ig
u
r
ab
le
d
e
p
th
lim
its
,
wh
ile
th
e
ASP.NE
T
cr
awle
r
ca
p
tu
r
es
an
d
r
ep
la
y
s
VI
E
W
STAT
E
an
d
E
VE
NT
VAL
I
DAT
I
ON
to
k
en
s
to
s
u
p
p
o
r
t
m
u
lti
-
s
tep
f
o
r
m
n
a
v
ig
atio
n
[
8
]
.
Fo
r
J
av
aScr
ip
t
-
h
ea
v
y
a
p
p
licatio
n
s
,
th
e
No
d
eJS
cr
awle
r
lev
er
ag
es
h
ea
d
less
s
elen
iu
m
to
ex
ec
u
te
clien
t
-
s
id
e
r
o
u
tes
an
d
ex
tr
ac
t
d
y
n
am
ically
g
en
e
r
ated
u
n
if
o
r
m
r
eso
u
r
ce
lo
ca
to
r
(
UR
L
)
[
9
]
.
wh
er
ea
s
a
g
en
er
al
-
p
u
r
p
o
s
e
cr
awle
r
s
er
v
es a
s
a
b
r
ea
d
th
-
f
ir
s
t f
allb
ac
k
with
MI
ME
-
ty
p
e
f
ilter
in
g
a
n
d
l
o
o
p
-
av
o
id
a
n
ce
m
ec
h
a
n
is
m
s
[
1
0
]
,
[
1
1
]
.
T
h
e
d
is
tin
ctio
n
b
etwe
en
u
n
au
t
h
en
ticated
a
n
d
au
th
en
ticated
cr
awlin
g
wo
r
k
f
l
o
ws im
p
lem
en
ted
b
y
th
ese
cr
a
wler
s
is
illu
s
tr
ated
in
Fig
u
r
e
3
.
Fig
u
r
e
3
.
Un
a
u
th
en
ticated
a
n
d
au
th
en
ticated
cr
awlin
g
wo
r
k
f
lo
ws in
Ad
aWeb
Evaluation Warning : The document was created with Spire.PDF for Python.
C
o
m
p
u
t Sci
I
n
f
T
ec
h
n
o
l
I
SS
N:
2722
-
3
2
2
1
A
d
a
Web
:
a
s
ta
ck
-
a
d
a
p
tive
fr
a
mewo
r
k
fo
r
a
u
to
ma
ted
w
eb
-
vu
ln
era
b
ilit
y
a
s
s
ess
men
t
…
(
S
ye
d
A
ma
n
S
h
a
h
)
13
iii)
E
x
p
lo
it
lay
er
–
ea
c
h
d
is
co
v
er
ed
UR
L
is
en
q
u
eu
ed
to
th
e
s
et
o
f
ex
p
lo
it
m
o
d
u
les
en
ab
le
d
th
r
o
u
g
h
th
e
co
n
f
ig
u
r
atio
n
f
ile,
allo
win
g
tar
g
eted
an
d
a
u
to
m
ated
v
u
ln
er
a
b
ilit
y
ass
e
s
s
m
en
t.
T
h
e
SQL
in
jectio
n
m
o
d
u
le
in
v
o
k
es
s
q
lm
ap
with
elev
ated
test
in
g
p
ar
am
eter
s
(
--
lev
el
5
,
--
r
is
k
3
)
to
i
d
en
tify
in
jectio
n
p
o
in
ts
,
wh
ile
th
e
XSS
m
o
d
u
le
in
jects
a
cu
r
ated
co
r
p
u
s
o
f
c
o
n
tex
t
-
b
r
ea
k
in
g
p
ay
lo
ad
s
to
d
etec
t
r
ef
lecte
d
an
d
d
o
c
u
m
en
t
o
b
ject
m
o
d
el
(
DOM
)
-
b
ased
e
x
ec
u
tio
n
.
Ad
d
itio
n
ally
,
th
e
d
e
s
er
ializatio
n
-
b
ased
RCE
m
o
d
u
le
em
b
ed
s
a
B
ase6
4
-
en
co
d
ed
m
alicio
u
s
p
ic
k
le
o
b
ject
with
in
a
s
ess
io
n
co
o
k
ie,
r
esu
ltin
g
in
a
r
e
v
er
s
e
s
h
ell
u
p
o
n
u
n
s
af
e
d
eser
ializatio
n
[
1
2
]
,
[
1
3
]
.
T
h
e
in
ter
n
al
wo
r
k
f
lo
ws
o
f
th
e
SQLi,
XSS,
an
d
d
eser
ializati
o
n
-
b
ased
R
C
E
m
o
d
u
les ar
e
illu
s
tr
ated
in
Fig
u
r
e
4
.
Fig
u
r
e
4
.
E
x
p
lo
itatio
n
w
o
r
k
f
l
o
ws im
p
lem
en
ted
in
Ad
aWeb
iv
)
R
ep
o
r
tin
g
lay
er
–
ea
ch
e
x
p
lo
i
t
m
o
d
u
le
in
c
r
em
en
tally
ap
p
en
d
s
s
tr
u
ctu
r
ed
J
SON
r
ec
o
r
d
s
c
o
n
tain
in
g
t
h
e
UR
L
,
af
f
ec
ted
p
ar
am
eter
,
p
ay
lo
ad
,
ev
id
e
n
ce
,
an
d
tim
estam
p
to
d
ed
icate
d
r
esu
lt
f
iles
(
e.
g
.
,
s
q
li_
r
esu
lts
.
js
o
n
,
x
s
s
_
r
esu
lts
.
js
o
n
,
an
d
r
ce
_
r
esu
lts
.
js
o
n
)
.
T
h
is
in
cr
em
en
tal
lo
g
g
in
g
s
tr
ateg
y
en
s
u
r
es
th
at
p
ar
tial
r
esu
lts
ar
e
p
r
eser
v
ed
ev
e
n
if
ex
ec
u
tio
n
is
in
ter
r
u
p
ted
an
d
en
ab
les
f
i
n
e
-
g
r
ai
n
ed
tr
ac
ea
b
ilit
y
b
etwe
en
d
is
co
v
e
r
ed
v
u
ln
er
ab
ilit
ies
an
d
t
h
eir
c
o
r
r
esp
o
n
d
i
n
g
p
r
o
o
f
-
of
-
co
n
ce
p
t
ar
tifa
cts.
T
h
e
tr
an
s
f
o
r
m
atio
n
o
f
th
ese
in
ter
m
ed
iate
J
SON
o
u
tp
u
ts
in
to
th
e
f
in
al
co
n
s
o
lid
ated
PDF
r
ep
o
r
t
is
illu
s
tr
ated
in
Fig
u
r
e
5
.
Fig
u
r
e
5
.
R
ep
o
r
tin
g
wo
r
k
f
lo
w
f
r
o
m
s
tr
u
ctu
r
ed
J
SON
o
u
tp
u
ts
to
co
n
s
o
lid
ated
PDF g
en
er
atio
n
2
.
2
.
Alg
o
rit
hm
Alg
o
r
ith
m
f
o
r
m
alize
s
th
e
e
n
d
-
to
-
en
d
ex
ec
u
tio
n
l
o
g
ic
o
f
Ad
aWeb
,
en
co
m
p
ass
in
g
co
n
f
ig
u
r
atio
n
p
ar
s
in
g
,
tech
n
o
l
o
g
y
-
awa
r
e
cr
awlin
g
,
au
to
m
ated
ex
p
lo
itatio
n
,
an
d
in
cr
em
en
tal
r
ep
o
r
ti
n
g
,
as
d
etailed
in
Evaluation Warning : The document was created with Spire.PDF for Python.
I
SS
N
:
2
7
2
2
-
3
2
2
1
C
o
m
p
u
t Sci
I
n
f
T
ec
h
n
o
l
,
Vo
l.
7
,
No
.
1
,
Ma
r
ch
2
0
2
6
:
1
0
-
1
9
14
Alg
o
r
ith
m
1
.
T
h
e
alg
o
r
ith
m
e
x
p
licitly
ca
p
tu
r
es
th
e
d
ec
is
io
n
p
o
in
ts
in
v
o
lv
e
d
in
cr
awle
r
s
e
lectio
n
,
co
n
d
itio
n
al
ex
ec
u
tio
n
o
f
v
u
ln
e
r
ab
ilit
y
m
o
d
u
les,
an
d
s
tr
u
ctu
r
ed
lo
g
g
in
g
o
f
ex
p
l
o
itatio
n
r
esu
lts
b
ased
o
n
u
s
er
-
d
ef
in
ed
co
n
f
ig
u
r
atio
n
f
la
g
s
.
B
y
p
r
ese
n
tin
g
th
e
c
o
m
p
lete
wo
r
k
f
lo
w
in
a
p
r
o
ce
d
u
r
al
f
o
r
m
,
th
e
alg
o
r
ith
m
im
p
r
o
v
es
th
e
r
ep
r
o
d
u
cib
ilit
y
an
d
clar
ity
o
f
Ad
aWeb
’
s
ass
es
s
m
en
t m
eth
o
d
o
lo
g
y
.
Alg
o
r
ith
m
1
: A
d
aWeb
wo
r
k
f
l
o
w
f
o
r
c
r
awlin
g
,
ex
p
lo
itatio
n
an
d
r
ep
o
r
tin
g
Input: config.json
Output:
A
da
W
eb_final_report.pdf
1.
loadConfig(cfg ← config.json)
// read target URL, flags, creds
2.
clearPreviousOutput()
// rm
-
rf output/* reports/*
3.
tech ←
W
appalyzerDetect(cfg.url)
// PHP, ASP.NET, NodeJS, …
4.
switch tech
// pick crawler class
5.
case PHP
: crawler ← PHPCrawler()
6.
case ASP.NET : crawler ← ASPCrawler()
7.
case NodeJS : crawler ← NodeJSCrawler()
8.
default
: crawler ← GeneralCrawler()
9.
end switch
10.
urls ← crawler.crawl(
// breadth
-
first search
a.
root
= cfg.url,
b.
depth
= cfg.depth,
c.
auth
= cfg.authenticated,
d.
username = cfg.username,
e.
password = cfg.password )
11.
writeFile('crawled_urls.txt', urls)
12.
for url in urls do
13.
if cfg.SQLi then
// SQL injection module
14.
vul, pay, evid ← sqlmap(url, level=5, risk=3)
15.
if vul = TRUE then
16.
logJSON('sqli_results.json', url, pay, evid, now())
17.
end if
18.
end if
19.
if cfg.XSS then
// reflective
-
XSS module
20.
refl, pay, evid ← xssInject(url, payloadCorpus)
21.
if refl = TRUE then
22.
logJSON('xss_results.json', url, pay, evid, now())
23.
end if
24.
end if
25.
if cfg.RCE_Deserialization then
// pickle RCE module
26.
shell ← pickleExploit(url, cookie='user_data')
27.
if shell = TRUE then
28.
logJSON('rce_results.json', url, 'pickle', 'shell
-
open', now())
29.
end if
30.
end if
31.
end for
32.
mergeReports( ['sqli_results.json',
'xss_results.json',
'rce_results.json'] ) → combined.csv
33.
exportPDF(combined.csv, '
A
da
W
eb_final_report.pdf')
2
.
3
.
Co
nfi
g
ura
t
io
n a
nd
inp
u
t
All
r
u
n
tim
e
p
ar
am
eter
s
r
eq
u
ir
ed
b
y
Ad
aWeb
ar
e
s
p
e
cif
ied
in
a
s
in
g
le
co
n
f
ig
u
r
atio
n
f
ile
(
co
n
f
ig
.
js
o
n
)
,
e
n
ab
lin
g
f
lex
ib
le
an
d
r
ep
r
o
d
u
cib
le
ex
e
cu
tio
n
ac
r
o
s
s
d
if
f
er
e
n
t
ta
r
g
et
ap
p
licatio
n
s
.
T
h
e
co
n
f
i
g
u
r
atio
n
in
clu
d
es
th
e
tar
g
et
UR
L
,
cr
awlin
g
d
ep
t
h
,
o
p
tio
n
al
au
t
h
en
ticatio
n
cr
e
d
en
tials
,
B
o
o
lean
f
lag
s
to
en
ab
le
o
r
d
is
ab
le
in
d
iv
i
d
u
al
ex
p
lo
it
class
es,
an
d
th
e
o
u
tp
u
t
f
ile
p
ath
u
s
ed
to
s
to
r
e
d
is
co
v
er
ed
UR
L
s
.
A
s
u
m
m
ar
y
o
f
th
ese
co
n
f
ig
u
r
a
tio
n
p
ar
am
eter
s
an
d
th
eir
r
o
les with
in
th
e
s
y
s
tem
is
p
r
o
v
id
e
d
in
T
ab
le
1
.
T
ab
le
1
.
C
o
n
f
i
g
u
r
atio
n
p
ar
am
eter
s
d
ef
in
ed
in
c
o
n
f
i
g
.
js
o
n
an
d
th
eir
r
o
les in
Ad
aWeb
ex
ec
u
tio
n
F
i
e
l
d
Ty
p
e
R
e
q
u
i
r
e
d
Ex
a
m
p
l
e
/
d
e
f
a
u
l
t
D
e
scri
p
t
i
o
n
U
R
L
S
t
r
i
n
g
✓
h
t
t
p
:
/
/
d
v
w
a
.
l
o
c
a
l
/
R
o
o
t
U
R
L
o
f
t
h
e
t
a
r
g
e
t
a
p
p
l
i
c
a
t
i
o
n
D
e
p
t
h
I
n
t
✓
3
M
a
x
i
m
u
m
c
r
a
w
l
d
e
p
t
h
(
B
F
S
l
e
v
e
l
s)
A
u
t
h
e
n
t
i
c
a
t
e
d
B
o
o
l
✓
t
r
u
e
En
a
b
l
e
f
o
r
m
-
l
o
g
i
n
r
o
u
t
i
n
e
a
n
d
c
o
o
k
i
e
r
e
u
se
U
sern
a
m
e
S
t
r
i
n
g
-
a
d
m
i
n
Lo
g
i
n
c
r
e
d
e
n
t
i
a
l
i
f
a
u
t
h
e
n
t
i
c
a
t
e
d
=
t
r
u
e
P
a
ssw
o
r
d
S
t
r
i
n
g
-
p
a
ssw
o
r
d
C
o
r
r
e
s
p
o
n
d
i
n
g
p
a
ssw
o
r
d
S
Q
Li
B
o
o
l
✓
t
r
u
e
To
g
g
l
e
S
Q
L
-
i
n
j
e
c
t
i
o
n
mo
d
u
l
e
X
S
S
B
o
o
l
✓
t
r
u
e
To
g
g
l
e
c
r
o
ss
-
s
i
t
e
-
scri
p
t
i
n
g
mo
d
u
l
e
R
C
E
_
D
e
s
e
r
i
a
l
i
z
a
t
i
o
n
B
o
o
l
-
f
a
l
se
To
g
g
l
e
P
y
t
h
o
n
-
p
i
c
k
l
e
R
C
E
mo
d
u
l
e
O
u
t
p
u
t
_
F
i
l
e
S
t
r
i
n
g
✓
o
u
t
p
u
t
/
c
r
a
w
l
e
d
_
u
r
l
s.
t
x
t
P
a
t
h
f
o
r
t
h
e
l
i
s
t
o
f
c
r
a
w
l
e
d
U
R
Ls
Evaluation Warning : The document was created with Spire.PDF for Python.
C
o
m
p
u
t Sci
I
n
f
T
ec
h
n
o
l
I
SS
N:
2722
-
3
2
2
1
A
d
a
Web
:
a
s
ta
ck
-
a
d
a
p
tive
fr
a
mewo
r
k
fo
r
a
u
to
ma
ted
w
eb
-
vu
ln
era
b
ilit
y
a
s
s
ess
men
t
…
(
S
ye
d
A
ma
n
S
h
a
h
)
15
2
.
4
.
Cra
wling
p
ha
s
e
Ad
aWeb
p
er
f
o
r
m
s
b
r
ea
d
t
h
-
f
ir
s
t
cr
awlin
g
o
f
web
ap
p
licatio
n
s
u
s
in
g
s
tack
-
s
p
ec
if
ic
s
tr
ateg
i
es
tailo
r
ed
to
th
e
tar
g
et’
s
tech
n
o
lo
g
y
s
tack
,
as
id
en
tifie
d
d
u
r
in
g
f
in
g
er
p
r
in
tin
g
.
E
ac
h
cr
a
wler
s
u
p
p
o
r
ts
b
o
th
u
n
au
th
e
n
ticated
an
d
au
th
e
n
ticated
tr
av
er
s
al,
en
ab
lin
g
co
m
p
l
ete
attac
k
s
u
r
f
ac
e
d
is
co
v
er
y
.
Fo
r
u
n
au
th
e
n
ticated
cr
awlin
g
,
all
c
r
awle
r
s
p
ar
s
e
a
n
d
q
u
eu
e
lin
k
s
u
s
in
g
s
tack
-
r
ele
v
an
t
lo
g
ic
—
h
an
d
lin
g
s
tatic
an
d
d
y
n
am
ic
r
o
u
tin
g
,
MI
ME
f
ilter
in
g
,
a
n
d
l
o
o
p
-
a
v
o
id
an
ce
.
Dis
co
v
er
ed
UR
L
s
ar
e
s
to
r
ed
in
o
u
tp
u
t/cr
awl
ed
_
u
r
ls
.
tx
t.
W
h
en
au
th
en
ticatio
n
is
en
ab
led
,
A
d
aWeb
au
to
m
atica
lly
s
ea
r
ch
e
s
f
o
r
lo
g
in
p
a
g
es
in
UR
L
s
.
I
t
th
en
p
ar
s
es
th
e
ass
o
ciate
d
HT
ML
o
r
DOM
to
ex
tr
ac
t
in
p
u
t
f
ield
s
d
y
n
am
ically
,
in
clu
d
in
g
h
id
d
en
to
k
en
s
.
A
p
r
o
v
id
e
d
u
s
er
n
am
e
an
d
p
ass
wo
r
d
ar
e
i
n
jecte
d
b
ased
o
n
f
ield
n
am
e
h
e
u
r
is
tics
.
I
n
th
e
PHP
cr
awle
r
,
a
p
er
s
is
ten
t
s
ess
io
n
is
u
s
ed
to
r
eta
in
th
e
PHPS
E
SS
I
D
co
o
k
ie
p
o
s
t
-
lo
g
in
.
On
ce
au
th
en
ticatio
n
is
co
n
f
ir
m
ed
—
b
ased
o
n
k
ey
wo
r
d
s
lik
e
“d
ash
b
o
ar
d
”
o
r
“lo
g
o
u
t”
in
th
e
r
esp
o
n
s
e
—
th
e
cr
awle
r
r
esets
its
v
is
ited
lis
t
an
d
p
er
f
o
r
m
s
a
s
ec
o
n
d
cr
awl
o
f
th
e
au
th
e
n
ticated
s
ite
s
tate.
I
n
th
e
ASP.NE
T
cr
awle
r
,
Ad
aWeb
ca
p
tu
r
es
_
_
VI
E
W
STAT
E
an
d
_
_
E
VE
N
T
VAL
I
DAT
I
ON
to
k
en
s
,
wh
i
ch
ar
e
r
eq
u
ir
ed
f
o
r
v
alid
f
o
r
m
s
u
b
m
is
s
io
n
.
T
h
ese
f
ield
s
ar
e
in
clu
d
ed
in
t
h
e
POST
r
eq
u
est
alo
n
g
with
cr
ed
en
tials
,
en
s
u
r
in
g
co
m
p
atib
ilit
y
with
m
u
lti
-
s
tep
f
o
r
m
s
.
T
h
e
cr
awle
r
th
e
n
v
e
r
if
ies
lo
g
in
s
u
cc
ess
an
d
r
ec
r
awl
s
th
e
au
th
en
ticated
co
n
ten
t
u
s
in
g
th
e
s
am
e
s
ess
io
n
.
I
n
th
e
No
d
eJS
cr
awle
r
,
Ad
aWeb
lev
er
ag
es
Selen
iu
m
W
eb
Dr
iv
er
to
in
ter
ac
t
with
d
y
n
a
m
ic
J
av
aScr
ip
t
-
d
r
iv
en
s
in
g
le
p
ag
e
ap
p
licatio
n
s
(
SP
As).
L
o
g
in
f
o
r
m
s
ar
e
d
etec
ted
an
d
f
illed
u
s
in
g
liv
e
DOM
m
an
ip
u
latio
n
,
with
cr
ed
en
tials
in
jecte
d
in
to
r
elev
an
t
<in
p
u
t>
f
ield
s
v
ia
s
en
d
_
k
ey
s
(
)
.
Af
ter
f
o
r
m
s
u
b
m
is
s
io
n
,
th
e
to
o
l
v
er
if
ies
lo
g
in
s
u
cc
ess
th
r
o
u
g
h
p
ag
e
c
o
n
ten
t
an
d
r
e
-
c
r
awls
th
e
ap
p
licatio
n
u
s
in
g
th
e
s
am
e
b
r
o
wser
in
s
tan
ce
—
p
r
eser
v
in
g
au
th
en
ticatio
n
to
k
e
n
s
s
u
ch
as
J
W
T
s
o
r
lo
ca
l/s
e
s
s
io
n
s
to
r
ag
e
en
tr
ies.
T
h
is
m
u
lti
-
s
tack
,
s
ess
io
n
-
awa
r
e
au
th
en
ticatio
n
s
tr
ateg
y
allo
ws
Ad
aWeb
to
tr
av
er
s
e
o
th
e
r
wis
e
in
ac
ce
s
s
ib
le
p
ath
s
an
d
f
ee
d
all
r
ea
ch
ab
le
en
d
p
o
i
n
ts
—
au
th
en
ticated
o
r
p
u
b
lic
—
in
to
its
ex
p
lo
it
m
o
d
u
les.
T
h
is
en
s
u
r
es
m
ax
im
u
m
v
u
ln
er
ab
ilit
y
c
o
v
er
a
g
e
with
m
in
im
al
m
an
u
al
in
ter
v
en
tio
n
[
1
4
]
–
[
1
6
]
.
2
.
5
.
E
x
plo
it
a
t
io
n
p
ha
s
e
Fo
r
ea
ch
d
is
co
v
er
e
d
UR
L
(
Al
g
o
r
ith
m
1
,
lin
es
1
3
–
3
1
)
,
Ad
a
W
eb
co
n
d
itio
n
ally
ex
ec
u
tes
th
e
en
a
b
led
ex
p
lo
it
m
o
d
u
les
in
a
s
eq
u
en
tial
an
d
m
o
n
ito
r
ed
m
a
n
n
er
.
I
n
th
e
SQL
in
jectio
n
p
h
ase,
p
ar
am
eter
s
ar
e
f
u
zz
ed
u
s
in
g
s
q
lm
ap
,
an
d
r
ea
l
-
tim
e
s
tan
d
ar
d
o
u
tp
u
t
is
p
a
r
s
ed
f
o
r
d
ef
in
itiv
e
i
n
d
icato
r
s
s
u
c
h
as
“p
ar
a
m
eter
is
v
u
ln
er
ab
le,
”
wh
ile
th
e
XSS
m
o
d
u
le
in
jects
r
o
tatin
g
p
ay
lo
ad
s
in
to
p
ar
am
eter
s
an
d
f
o
r
m
in
p
u
ts
an
d
v
er
if
ies
r
ef
lectio
n
o
r
s
cr
ip
t
ex
ec
u
tio
n
th
r
o
u
g
h
s
tr
in
g
m
atch
in
g
f
o
r
s
tatic
p
ag
es
an
d
DOM
d
if
f
er
en
cin
g
f
o
r
d
y
n
a
m
ic
co
n
ten
t
[
1
7
]
.
Fo
r
d
eser
ializatio
n
-
b
ased
R
C
E
,
a
cr
af
ted
p
ick
le
p
ay
lo
ad
is
in
jecte
d
v
ia
a
s
e
s
s
io
n
co
o
k
ie,
an
d
a
Netc
at
lis
ten
er
awa
its
s
u
cc
ess
f
u
l
s
h
ell
estab
lis
h
m
en
t,
with
all
in
ter
m
e
d
iate
an
d
f
in
al
r
esu
lts
lo
g
g
ed
im
m
ed
iately
to
s
u
p
p
o
r
t a
n
al
y
s
t in
ter
v
en
tio
n
w
h
ile
th
e
s
ca
n
c
o
n
tin
u
es.
2
.
6
.
E
v
a
lua
t
i
o
n
p
ro
ce
du
re
Valid
atio
n
em
p
lo
y
ed
d
elib
er
ately
v
u
ln
er
ab
le
ap
p
licatio
n
s
DVWA
[
1
8
]
an
d
W
eb
Go
at
h
o
s
ted
lo
ca
lly
[
5
]
,
[
1
9
]
,
[
2
0
]
.
T
h
r
ee
m
etr
ics
wer
e
r
ec
o
r
d
e
d
:
i)
c
o
v
er
ag
e
s
tu
d
y
–
t
o
tal
UR
L
s
,
u
n
iq
u
e
p
ar
a
m
eter
ized
lin
k
s
,
an
d
au
th
e
n
ticated
-
o
n
l
y
p
ath
s
p
er
cr
awle
r
,
ii)
d
etec
tio
n
a
cc
u
r
ac
y
–
t
r
u
e/f
alse
p
o
s
itiv
es
an
d
f
alse
n
eg
ativ
es
f
o
r
SQLi,
XSS,
an
d
R
C
E
m
o
d
u
les
ag
ain
s
t
g
r
o
u
n
d
-
tr
u
th
v
u
ln
er
ab
ilit
y
lis
ts
[
2
1
]
,
an
d
iii
)
r
ep
o
r
tin
g
l
aten
cy
,
w
all
-
clo
ck
tim
e
f
r
o
m
ex
p
l
o
it
ex
ec
u
tio
n
to
J
SON
r
ec
o
r
d
av
ailab
ilit
y
,
q
u
an
tify
in
g
in
c
r
em
en
tal
-
r
ep
o
r
tin
g
ef
f
icien
cy
[
2
2
]
.
T
h
is
p
r
o
to
co
l
en
s
u
r
es
th
at
all
ex
p
er
im
en
tal
o
u
tco
m
es
d
ir
ec
tly
r
ef
lect
Ad
a
W
eb
’
s
im
p
lem
en
ted
ca
p
ab
ilit
ies with
o
u
t r
ely
in
g
o
n
ex
ter
n
al
ass
u
m
p
tio
n
s
.
2
.
7
.
Rea
l
‑
t
o
‑
s
y
nthet
ic‑
t
o
‑
re
a
l t
esting
Ad
aWeb
im
p
lem
en
ts
a
r
ea
l
-
to
-
s
y
n
th
etic
-
to
-
r
ea
l
(
R
SR
)
ex
p
lo
itatio
n
s
tr
ateg
y
to
r
ed
u
ce
n
o
is
e
an
d
im
p
r
o
v
e
p
r
ec
is
io
n
d
u
r
in
g
a
u
to
m
ated
v
u
ln
er
a
b
ilit
y
ass
ess
m
e
n
t.
T
h
e
co
r
e
p
r
in
cip
le
o
f
R
SR
is
to
in
itially
in
ject
a
lig
h
tweig
h
t,
b
en
ig
n
“c
an
ar
y
”
p
ay
lo
a
d
to
v
er
if
y
wh
eth
e
r
a
p
ar
am
eter
o
r
en
d
p
o
in
t
e
x
h
ib
its
v
u
ln
er
a
b
le
b
eh
av
io
r
.
On
ly
wh
en
th
is
p
r
e
lim
in
ar
y
p
r
o
b
e
s
u
cc
ee
d
s
d
o
e
s
Ad
aWeb
e
s
ca
late
to
f
u
ll
ex
p
lo
itatio
n
,
th
er
eb
y
m
in
im
izin
g
f
alse p
o
s
itiv
es a
n
d
u
n
n
ec
ess
ar
y
p
a
y
lo
ad
d
eliv
er
y
.
I
n
th
e
d
eser
ializatio
n
-
b
ased
R
C
E
m
o
d
u
le,
Ad
aWeb
f
ir
s
t
in
j
ec
ts
a
h
ar
m
less
p
ick
le
-
s
er
ialized
s
tr
in
g
,
en
co
d
ed
in
B
ase6
4
,
th
r
o
u
g
h
a
p
o
ten
tially
v
u
ln
e
r
ab
le
co
o
k
ie.
Su
cc
ess
f
u
l
ac
ce
p
tan
ce
an
d
d
eser
ializatio
n
o
f
th
is
p
ay
lo
ad
ar
e
c
o
n
f
ir
m
ed
b
y
in
d
icato
r
s
s
u
ch
as
th
e
p
r
esen
ce
o
f
th
e
g
ASV
p
ick
le
s
ig
n
atu
r
e
o
r
co
n
tr
o
lled
r
ef
lectio
n
in
th
e
s
er
v
er
r
esp
o
n
s
e.
Up
o
n
v
e
r
if
icatio
n
,
th
e
m
o
d
u
le
escalate
s
b
y
in
jectin
g
a
m
alicio
u
s
p
ick
l
e
p
ay
lo
ad
d
esig
n
ed
to
estab
lis
h
a
r
ev
er
s
e
s
h
ell.
Similar
ly
,
th
e
XSS
m
o
d
u
le
b
e
g
in
s
b
y
test
in
g
p
ar
a
m
eter
s
an
d
f
o
r
m
in
p
u
ts
with
co
n
te
x
t
-
b
r
ea
k
in
g
y
et
non
-
e
x
p
lo
itab
le
p
r
o
b
es.
R
ef
le
ctio
n
is
m
o
n
ito
r
e
d
b
o
th
in
t
h
e
s
tatic
HT
T
P
r
esp
o
n
s
e
an
d
wit
h
in
th
e
d
y
n
am
ically
r
en
d
er
e
d
DOM
to
e
n
s
u
r
e
ac
c
u
r
ate
d
etec
tio
n
o
f
in
jectio
n
p
o
in
ts
.
On
ly
af
ter
s
u
cc
ess
f
u
l
r
e
f
lectio
n
is
o
b
s
er
v
e
d
d
o
es Ad
aWeb
d
ep
lo
y
ad
v
a
n
ce
d
p
ay
lo
a
d
s
to
co
n
f
ir
m
ex
ec
u
ta
b
le
s
cr
ip
t b
eh
av
i
o
r
.
Fo
r
SQL
in
jectio
n
test
in
g
,
alt
h
o
u
g
h
s
q
lm
ap
p
er
f
o
r
m
s
th
e
c
o
r
e
ex
p
lo
itatio
n
lo
g
ic,
Ad
aWeb
ap
p
lies
a
p
r
e
-
f
ilter
in
g
s
tag
e
to
r
ed
u
ce
s
ca
n
n
in
g
n
o
is
e.
O
n
ly
UR
L
s
an
d
p
a
r
am
eter
s
co
n
f
ir
m
e
d
as
r
ea
ch
ab
le
an
d
Evaluation Warning : The document was created with Spire.PDF for Python.
I
SS
N
:
2
7
2
2
-
3
2
2
1
C
o
m
p
u
t Sci
I
n
f
T
ec
h
n
o
l
,
Vo
l.
7
,
No
.
1
,
Ma
r
ch
2
0
2
6
:
1
0
-
1
9
16
s
tr
u
ctu
r
ally
in
jecta
b
le
d
u
r
in
g
th
e
cr
awlin
g
p
h
ase
ar
e
f
o
r
war
d
ed
to
s
q
lm
ap
f
o
r
f
u
r
th
e
r
test
in
g
.
T
h
is
s
elec
tiv
e
escalatio
n
av
o
id
s
u
n
n
ec
ess
ar
y
b
r
u
te
-
f
o
r
cin
g
wh
ile
m
ain
tain
in
g
co
m
p
r
eh
en
s
iv
e
c
o
v
er
ag
e
.
Ov
er
all,
th
e
R
SR
s
tr
ateg
y
en
a
b
les
Ad
aWeb
to
o
p
er
ate
in
a
m
an
n
er
a
n
alo
g
o
u
s
to
a
ca
u
tio
u
s
h
u
m
an
an
aly
s
t
r
ath
er
th
an
a
b
lin
d
s
ca
n
n
er
.
B
y
s
y
s
tem
atica
lly
co
n
f
ir
m
in
g
s
u
r
f
ac
e
-
le
v
el
v
u
ln
e
r
ab
ili
ty
in
d
icato
r
s
b
ef
o
r
e
co
m
m
itti
n
g
to
f
u
ll
ex
p
lo
itatio
n
,
t
h
e
f
r
am
ewo
r
k
im
p
r
o
v
es
ef
f
icien
cy
a
n
d
r
ed
u
ce
s
f
alse
p
o
s
itiv
es
ac
r
o
s
s
all
s
u
p
p
o
r
ted
ex
p
lo
it
m
o
d
u
les.
T
h
is
d
esig
n
c
h
o
ice
c
o
n
tr
ib
u
tes
s
ig
n
if
ican
tly
t
o
th
e
r
o
b
u
s
tn
e
s
s
an
d
r
eliab
ilit
y
o
f
Ad
aWeb
’
s
ass
es
s
m
en
t m
eth
o
d
o
lo
g
y
.
3.
RE
SU
L
T
S AN
D
D
I
SCU
SS
I
O
N
Ad
aWeb
was
ev
alu
ated
ag
ai
n
s
t
f
o
u
r
o
p
en
l
y
av
ailab
le,
d
elib
er
ately
v
u
ln
e
r
ab
le
web
-
a
p
p
licatio
n
test
b
ed
s
,
n
am
ely
DVWA,
b
W
AP
P,
an
d
Acu
n
etix
,
wh
ich
co
llectiv
ely
r
ep
r
esen
t
two
wid
ely
u
s
ed
b
ac
k
-
en
d
tech
n
o
lo
g
y
s
tack
s
:
PHP
an
d
ASP.NE
T
MV
C
.
Fo
r
ea
ch
tar
g
et
ap
p
licatio
n
,
we
en
u
m
er
ate
d
th
e
s
ee
d
e
d
SQLi
an
d
XSS
v
u
ln
er
a
b
ilit
ies
d
o
cu
m
en
ted
b
y
th
e
r
esp
ec
tiv
e
m
ai
n
tain
er
s
an
d
m
ea
s
u
r
ed
h
o
w
m
an
y
o
f
th
ese
f
laws
wer
e
s
u
cc
ess
f
u
lly
d
etec
ted
b
y
Ad
aWeb
u
s
in
g
its
d
ef
au
lt
co
n
f
ig
u
r
atio
n
s
ettin
g
s
[
1
4
]
,
[
2
3
]
‒
[
2
5
]
.
T
h
e
d
is
tr
ib
u
tio
n
o
f
s
ee
d
ed
v
u
ln
er
ab
ilit
ies
ac
r
o
s
s
th
e
ev
al
u
ated
test
b
ed
s
is
s
u
m
m
ar
ized
in
T
ab
le
2
,
an
d
d
etec
tio
n
ef
f
ec
tiv
e
n
ess
is
r
ep
o
r
ted
p
er
v
u
ln
er
a
b
ilit
y
class
u
s
in
g
th
e
s
u
cc
ess
r
ate
m
etr
ic
d
e
f
in
ed
in
(
1
)
.
Su
cc
ess
R
a
te_
v
u
ln
=(
N_
d
etec
te
d
,
v
u
ln
/
N_
s
ee
d
ed
,
v
u
ln
)
×
1
0
0
%,
wh
er
e
v
u
ln
∈
{SQL
i,
XSS}
(
1
)
T
ab
le
2
.
Dis
tr
ib
u
tio
n
o
f
d
o
cu
m
en
ted
SQLi
an
d
XSS v
u
ln
e
r
ab
ilit
ies ac
r
o
s
s
DV
W
A,
b
W
A
PP
,
an
d
A
cu
n
etix
Ta
r
g
e
t
S
e
e
d
e
d
S
Q
Li
D
e
t
e
c
t
e
d
S
Q
Li
S
R
(
%)
S
e
e
d
e
d
X
S
S
D
e
t
e
c
t
e
d
X
S
S
S
R
(
%)
D
V
W
A
12
12
1
0
0
12
12
1
0
0
b
W
A
P
P
21
20
95
19
18
95
A
c
u
n
e
t
i
x
17
17
1
0
0
7
6
86
3
.
1
.
Q
ua
ntit
a
t
iv
e
f
ind
ing
s
T
h
is
s
u
b
s
ec
tio
n
p
r
esen
ts
th
e
q
u
an
titativ
e
r
esu
lts
o
f
Ad
aWeb
’
s
ev
alu
atio
n
ac
r
o
s
s
m
u
ltip
le
d
elib
er
ately
v
u
ln
er
ab
le
web
-
ap
p
licatio
n
b
e
n
ch
m
a
r
k
s
.
T
h
e
f
in
d
in
g
s
ar
e
o
r
g
an
ize
d
to
h
ig
h
lig
h
t
o
v
e
r
all
d
etec
tio
n
ef
f
ec
tiv
en
ess
,
p
er
-
a
p
p
licatio
n
p
er
f
o
r
m
an
ce
,
a
n
d
s
o
u
r
ce
s
o
f
m
is
s
ed
v
u
ln
er
ab
ilit
ies,
th
er
eb
y
p
r
o
v
id
i
n
g
a
n
u
an
ce
d
v
iew
o
f
b
o
t
h
s
tr
en
g
th
s
an
d
lim
itatio
n
s
.
T
o
g
e
th
er
,
th
ese
r
esu
lts
o
f
f
er
em
p
ir
ical
ev
id
en
ce
o
f
Ad
aWeb
’
s
ab
ilit
y
to
g
en
er
aliz
e
ac
r
o
s
s
h
eter
o
g
e
n
eo
u
s
tech
n
o
lo
g
y
s
tack
s
with
o
u
t ta
r
g
et
-
s
p
ec
if
ic
tu
n
in
g
.
i)
Hig
h
o
v
er
all
r
ec
all.
Acr
o
s
s
all
th
r
ee
b
en
ch
m
ar
k
s
Ad
aWeb
d
etec
ted
4
9
/5
0
SQLi
f
laws
(
9
9
%)
an
d
3
6
/3
8
XSS
f
laws
(
9
8
%)
with
o
u
t
an
y
tar
g
et
-
s
p
ec
if
ic
tu
n
in
g
.
T
h
is
co
n
f
ir
m
s
th
at
tech
n
o
l
o
g
y
-
ali
g
n
ed
cr
awlin
g
an
d
co
n
tex
t
-
awa
r
e
p
a
y
lo
ad
s
et
s
g
en
er
alize
well
ac
r
o
s
s
h
eter
o
g
en
eo
u
s
s
tack
s
[
1
7
]
,
[
2
0
]
.
ii)
P
e
r
f
e
c
t
p
e
r
f
o
r
m
a
n
c
e
o
n
D
V
W
A
a
n
d
A
c
u
n
e
t
i
x
.
B
o
t
h
s
i
t
e
s
r
u
n
t
r
a
d
i
t
i
o
n
a
l
P
H
P
o
r
m
i
x
e
d
A
S
P
.
N
E
T
/
P
H
P
b
a
c
k
e
n
d
s
a
n
d
e
x
p
o
s
e
v
u
l
n
e
r
a
b
i
l
i
t
i
e
s
p
r
i
m
a
r
i
l
y
t
h
r
o
u
g
h
q
u
e
r
y
-
s
t
r
i
n
g
p
a
r
a
m
e
t
e
r
s
—
a
n
i
d
e
a
l
m
a
t
c
h
f
o
r
A
d
a
W
e
b
’
s
P
H
P
c
r
a
w
l
e
r
a
n
d
r
e
f
l
e
c
t
i
v
e
X
S
S
e
n
g
i
n
e
,
w
h
i
c
h
a
c
h
i
e
v
e
d
1
0
0
%
r
e
c
a
l
l
o
n
b
o
t
h
S
Q
L
i
a
n
d
X
S
S
[
1
9
]
.
iii)
Min
o
r
m
is
s
es
o
n
b
W
AP
P.
A
d
aWeb
o
v
er
lo
o
k
ed
o
n
e
SQLi
s
in
k
o
n
o
n
e
XSS
s
in
k
o
n
b
W
AP
P.
Ma
n
u
al
in
s
p
ec
tio
n
s
h
o
wed
th
at
th
ese
p
ay
lo
ad
s
ar
e
r
en
d
er
e
d
in
s
id
e
J
av
aScr
ip
t
s
tr
in
g
liter
als
—
an
ac
k
n
o
wled
g
e
d
b
lin
d
s
p
o
t f
o
r
p
u
r
ely
r
ef
lectio
n
-
b
ased
test
in
g
an
d
a
p
lan
n
e
d
t
ar
g
et
f
o
r
p
ay
lo
a
d
d
iv
e
r
s
if
icatio
n
.
iv
)
No
f
alse
p
o
s
itiv
es
r
ec
o
r
d
ed
.
E
v
er
y
aler
t
c
o
r
r
esp
o
n
d
ed
t
o
a
v
u
ln
er
a
b
ilit
y
lis
ted
in
th
e
p
r
o
jects’
g
r
o
u
n
d
-
tr
u
th
d
o
c
u
m
en
tatio
n
,
u
n
d
er
s
c
o
r
in
g
th
e
p
r
ec
is
io
n
b
en
ef
it
o
f
s
tack
-
s
p
ec
if
ic
r
ec
o
n
n
aiss
an
ce
(
Alg
o
r
ith
m
1
,
lin
es 4
–
1
1
)
co
u
p
le
d
with
tar
g
e
ted
ex
p
lo
it lo
g
ic
(
lin
es 1
4
–
3
3
)
.
3
.
2
.
P
y
t
ho
n
-
des
er
ia
liza
t
io
n
pro
o
f
-
of
-
co
ncept
T
o
v
alid
ate
Ad
aWeb
’
s
R
C
E
ca
p
ab
ilit
ies,
a
d
elib
er
ately
v
u
l
n
er
ab
le
Flas
k
m
icr
o
s
er
v
ice
was
d
ep
lo
y
ed
th
at
s
er
ialized
u
s
er
-
co
n
tr
o
lled
in
p
u
t
u
s
in
g
Py
t
h
o
n
’
s
p
ick
le
m
o
d
u
le
an
d
s
to
r
ed
it
in
a
B
ase6
4
-
en
co
d
ed
s
ess
io
n
co
o
k
ie.
T
h
is
in
ten
tio
n
ally
in
s
ec
u
r
e
d
esig
n
r
esu
lted
in
th
e
d
eser
ializatio
n
o
f
u
n
tr
u
s
ted
c
lien
t
d
ata
o
n
ev
er
y
r
eq
u
est,
th
e
r
eb
y
in
tr
o
d
u
cin
g
a
class
ical
d
eser
ializatio
n
-
b
ased
R
C
E
v
ec
to
r
.
T
h
e
test
b
ed
clo
s
ely
m
ir
r
o
r
s
r
ea
l
-
wo
r
ld
s
ess
io
n
-
h
an
d
lin
g
f
laws o
b
s
er
v
ed
in
in
s
ec
u
r
e
web
ap
p
l
icatio
n
s
.
Ad
aWeb
ex
p
lo
ited
th
is
v
u
ln
er
ab
ilit
y
u
s
in
g
its
R
SR
s
tr
ateg
y
,
b
eg
in
n
in
g
with
th
e
i
n
jectio
n
o
f
a
b
en
ig
n
p
ick
le
-
s
er
ialized
p
r
o
b
e
s
tr
in
g
in
to
th
e
s
ess
io
n
co
o
k
ie.
Su
cc
ess
f
u
l
d
ec
o
d
in
g
a
n
d
d
eser
ializatio
n
o
f
th
is
p
r
o
b
e
wer
e
v
er
if
ie
d
b
y
d
etec
tin
g
th
e
g
ASV
p
ick
le
s
ig
n
atu
r
e
an
d
t
h
e
ab
s
en
ce
o
f
s
er
v
er
-
s
id
e
er
r
o
r
s
in
th
e
r
esp
o
n
s
e.
T
h
is
co
n
f
ir
m
atio
n
p
h
ase
en
s
u
r
ed
th
at
th
e
d
eser
ializatio
n
p
ath
was e
x
p
lo
itab
le
b
ef
o
r
e
escalatio
n
.
Fo
llo
win
g
s
u
cc
ess
f
u
l
p
r
o
b
in
g
,
Ad
aWeb
escalate
d
th
e
atta
ck
b
y
in
jectin
g
a
cr
af
ted
r
ev
er
s
e
-
s
h
ell
p
ay
lo
ad
im
p
lem
en
te
d
v
ia
a
Py
th
o
n
class
o
v
er
r
id
in
g
th
e
_
_
r
ed
u
ce
_
_
(
)
m
et
h
o
d
.
T
h
e
m
eth
o
d
r
etu
r
n
ed
a
n
Evaluation Warning : The document was created with Spire.PDF for Python.
C
o
m
p
u
t Sci
I
n
f
T
ec
h
n
o
l
I
SS
N:
2722
-
3
2
2
1
A
d
a
Web
:
a
s
ta
ck
-
a
d
a
p
tive
fr
a
mewo
r
k
fo
r
a
u
to
ma
ted
w
eb
-
vu
ln
era
b
ilit
y
a
s
s
ess
men
t
…
(
S
ye
d
A
ma
n
S
h
a
h
)
17
o
s
.
s
y
s
tem
(
)
in
v
o
ca
tio
n
th
at
la
u
n
ch
ed
a
B
ash
s
h
ell
co
n
n
ec
tin
g
b
ac
k
to
Ad
aWeb
’
s
lis
ten
er
,
an
d
th
e
p
ay
l
o
ad
was
s
er
ialized
,
B
ase6
4
-
en
co
d
ed
,
a
n
d
r
ein
jecte
d
in
to
th
e
co
o
k
ie.
Up
o
n
d
eser
ializatio
n
b
y
th
e
s
er
v
er
,
th
e
em
b
e
d
d
ed
co
m
m
an
d
ex
ec
u
ted
,
r
esu
ltin
g
i
n
an
in
ter
ac
tiv
e
s
h
ell.
A
l
l
s
t
a
g
e
s
o
f
th
e
a
t
t
a
c
k
,
in
cl
u
d
in
g
s
y
n
th
e
t
i
c
p
r
o
b
in
g
,
ex
p
l
o
i
t
c
o
n
f
i
r
m
a
t
i
o
n
,
p
ay
l
o
ad
i
n
j
e
c
t
i
o
n
,
a
n
d
s
h
e
l
l
e
s
t
ab
l
i
s
h
m
e
n
t
,
we
r
e
l
o
g
g
ed
w
i
t
h
in
Ad
a
W
eb
’
s
in
cr
e
m
en
t
a
l
J
S
O
N
r
e
p
o
r
t
i
n
g
m
e
ch
an
i
s
m
.
T
h
i
s
s
t
r
u
c
tu
r
ed
lo
g
g
i
n
g
p
r
o
v
i
d
e
s
c
l
ea
r
t
r
a
c
e
ab
i
l
i
t
y
b
e
tw
e
e
n
v
u
l
n
e
r
ab
i
l
i
t
y
co
n
f
i
r
m
at
i
o
n
an
d
s
u
c
c
e
s
s
f
u
l
e
x
p
lo
i
t
a
t
i
o
n
.
O
v
er
a
l
l
,
t
h
e
ex
p
er
i
m
en
t
d
e
m
o
n
s
t
r
a
t
e
s
A
d
a
W
e
b
’
s
ab
i
l
i
t
y
t
o
r
e
l
ia
b
ly
d
e
t
e
c
t
a
n
d
ex
p
l
o
it
d
e
s
e
r
i
a
l
i
za
t
i
o
n
-
b
a
s
e
d
R
C
E
s
i
n
r
e
a
l
i
s
t
i
c
s
e
s
s
i
o
n
-
m
a
n
ag
em
e
n
t
s
c
en
a
r
io
s
w
h
i
l
e
a
d
h
e
r
in
g
to
a
co
n
tr
o
l
l
ed
,
v
e
r
if
i
c
a
t
i
o
n
-
f
i
r
s
t
wo
r
k
f
lo
w
[
1
2
]
.
3
.
3
.
I
nte
rpre
t
a
t
io
n
a
nd
im
pli
ca
t
io
ns
T
h
e
q
u
an
titativ
e
r
esu
lts
r
ep
o
r
ted
in
T
ab
les
3
an
d
4
,
to
g
et
h
er
with
th
e
q
u
alitativ
e
d
eser
ializatio
n
-
b
ased
R
C
E
d
em
o
n
s
tr
atio
n
,
s
u
p
p
o
r
t
A
d
aWeb
’
s
o
r
ig
in
al
d
esig
n
g
o
als.
Stack
-
ad
ap
tiv
e
co
v
e
r
ag
e
is
ev
id
e
n
ce
d
b
y
p
er
f
ec
t
r
ec
all
o
n
PHP
-
ce
n
tr
ic
tar
g
ets
an
d
co
n
s
is
ten
tly
h
ig
h
r
ec
all
o
n
ASP.NE
T
-
b
ased
ap
p
licatio
n
s
in
b
o
t
h
SQL
in
jectio
n
(
T
ab
le
3
)
an
d
XSS
d
etec
tio
n
(
T
ab
le
4
)
,
d
e
m
o
n
s
tr
atin
g
th
e
ef
f
ec
tiv
en
ess
o
f
alig
n
in
g
cr
awle
r
lo
g
ic
with
d
etec
ted
tech
n
o
lo
g
ies.
I
n
ad
d
itio
n
,
r
ea
l
-
tim
e,
a
u
d
it
-
r
ea
d
y
o
u
t
p
u
t
en
s
u
r
es
th
a
t
all
d
etec
tio
n
s
ar
e
lo
g
g
ed
to
s
tr
u
ctu
r
ed
J
SON
r
e
co
r
d
s
with
in
s
ec
o
n
d
s
o
f
d
is
co
v
er
y
,
e
n
ab
lin
g
an
aly
s
ts
to
tr
ia
g
e
f
in
d
i
n
g
s
d
u
r
in
g
ex
ec
u
tio
n
r
at
h
er
th
a
n
p
o
s
t h
o
c
.
T
h
e
ab
s
en
ce
o
f
f
alse
p
o
s
itiv
e
s
ac
r
o
s
s
all
ev
alu
ated
test
b
ed
s
f
u
r
th
er
h
ig
h
lig
h
ts
Ad
aWeb
’
s
lo
w
n
o
is
e
f
lo
o
r
,
an
im
p
o
r
ta
n
t
ad
v
a
n
tag
e
o
v
er
g
en
e
r
ic
s
ca
n
n
e
r
s
th
at
o
f
ten
s
ac
r
if
ice
p
r
ec
is
io
n
f
o
r
b
r
o
a
d
er
c
o
v
er
a
g
e.
T
h
e
f
ew
m
is
s
ed
XSS
ca
s
es,
as
r
ef
lecte
d
in
T
a
b
le
4
,
ex
p
o
s
e
a
k
n
o
wn
lim
itatio
n
o
f
r
ef
lect
io
n
-
b
ased
p
ay
lo
a
d
s
wh
en
in
jectio
n
o
cc
u
r
s
with
in
J
av
aScr
ip
t
s
tr
in
g
co
n
tex
ts
.
On
g
o
in
g
wo
r
k
th
er
ef
o
r
e
f
o
cu
s
es
o
n
h
y
b
r
i
d
p
a
y
lo
ad
g
en
er
atio
n
a
n
d
DOM
-
awa
r
e
c
o
n
tex
t
an
aly
s
is
to
ad
d
r
ess
th
is
g
ap
.
Ov
e
r
all,
th
ese
r
esu
lts
co
n
f
ir
m
th
at
Ad
aWeb
d
eliv
er
s
r
eliab
le
an
d
r
e
p
r
o
d
u
cib
le
v
u
ln
er
a
b
ilit
y
ass
es
s
m
en
t
ac
r
o
s
s
h
eter
o
g
en
eo
u
s
web
s
tack
s
wh
ile
m
ain
tain
in
g
a
lig
h
tweig
h
t a
n
d
m
o
d
u
lar
a
r
ch
itectu
r
e.
T
ab
le
3
.
SQLi
d
etec
tio
n
c
o
m
p
ar
is
o
n
Ta
r
g
e
t
S
e
e
d
e
d
S
Q
Li
A
d
a
W
e
b
d
e
t
e
c
t
e
d
B
u
r
p
P
r
o
ZA
P
A
JA
X
D
V
W
A
12
12
11
10
b
W
A
P
P
21
20
18
15
T
ab
le
4
.
XSS
d
etec
tio
n
co
m
p
a
r
is
o
n
Ta
r
g
e
t
S
e
e
d
e
d
X
S
S
A
d
a
W
e
b
d
e
t
e
c
t
e
d
B
u
r
p
P
r
o
ZA
P
A
JA
X
D
V
W
A
12
12
11
11
b
W
A
P
P
19
18
15
14
4.
CO
NCLU
SI
O
N
T
h
i
s
s
t
u
d
y
s
e
t
o
u
t
t
o
v
er
i
f
y
th
a
t
A
d
a
W
e
b
’
s
s
t
a
ck
-
ad
ap
t
i
v
e
w
o
r
k
f
lo
w
—
t
e
c
h
n
o
lo
g
y
f
in
g
e
r
p
r
i
n
t
in
g
,
c
r
a
w
l
e
r
s
e
l
e
c
t
io
n
,
e
x
p
l
o
i
t
ex
ec
u
t
i
o
n
,
an
d
i
n
c
r
e
m
e
n
t
a
l
J
S
ON
r
e
p
o
r
t
i
n
g
—
w
o
u
l
d
i
m
p
r
o
v
e
b
o
t
h
co
v
e
r
ag
e
a
n
d
p
r
e
c
i
s
io
n
in
w
eb
-
ap
p
l
i
ca
t
i
o
n
v
u
ln
e
r
a
b
i
l
i
ty
a
s
s
e
s
s
m
e
n
t
.
T
h
e
r
e
s
u
l
t
s
c
o
n
f
ir
m
th
a
t
e
x
p
ec
t
a
t
i
o
n
.
A
cr
o
s
s
f
o
u
r
h
e
t
e
r
o
g
en
eo
u
s
te
s
t
b
ed
s
A
d
aW
e
b
a
ch
i
e
v
e
d
n
ea
r
-
p
e
r
f
e
c
t
r
e
c
a
l
l
f
o
r
S
Q
L
-
i
n
j
ec
t
i
o
n
an
d
c
r
o
s
s
-
s
i
t
e
-
s
cr
i
p
t
in
g
f
l
a
w
s
,
l
o
g
g
ed
e
v
e
r
y
f
i
n
d
i
n
g
in
r
e
a
l
t
im
e
,
an
d
p
r
o
d
u
c
e
d
z
e
r
o
f
a
l
s
e
p
o
s
i
t
i
v
e
s
.
A
s
ep
a
r
a
t
e
F
l
a
s
k
d
e
m
o
f
u
r
th
e
r
s
h
o
w
e
d
th
a
t
t
h
e
f
r
a
m
e
w
o
r
k
c
a
n
e
x
p
l
o
i
t
s
e
r
v
e
r
-
s
i
d
e
P
y
th
o
n
d
e
s
e
r
i
a
l
iz
a
t
i
o
n
,
u
n
d
e
r
s
c
o
r
in
g
t
h
e
ex
t
en
s
i
b
i
l
i
t
y
p
r
o
m
i
s
e
d
in
t
h
e
I
n
t
r
o
d
u
c
t
i
o
n
.
L
o
o
k
in
g
a
h
e
ad
,
th
r
ee
d
ev
e
lo
p
m
e
n
t
p
a
t
h
s
em
e
r
g
e
:
p
a
y
lo
a
d
d
iv
e
r
s
if
i
c
a
t
i
o
n
.
H
y
b
r
id
p
a
y
lo
a
d
g
en
e
r
a
t
i
o
n
an
d
D
O
M
-
c
o
n
t
e
x
t
a
n
a
l
y
s
i
s
w
il
l
t
a
r
g
e
t
t
h
e
s
m
a
l
l
s
e
t
o
f
X
SS
s
i
n
k
s
t
h
a
t
e
l
u
d
e
d
r
e
f
l
e
c
t
io
n
-
b
a
s
ed
t
e
s
t
i
n
g
,
b
r
o
a
d
e
r
p
r
o
to
co
l
s
u
p
p
o
r
t.
Ad
d
i
n
g
G
r
ap
h
Q
L
,
W
eb
S
o
ck
e
t
,
a
n
d
s
i
n
g
l
e
-
p
a
g
e
-
a
p
p
l
i
ca
t
i
o
n
c
r
a
w
le
r
s
w
i
l
l
ex
t
e
n
d
co
v
e
r
ag
e
t
o
m
o
d
e
r
n
f
r
o
n
t
-
e
n
d
a
r
ch
i
t
e
c
tu
r
e
s
,
a
n
d
C
I
/
C
D
i
n
t
e
g
r
a
t
io
n
.
C
o
n
t
a
i
n
er
i
z
ed
d
ep
l
o
y
m
en
t
,
J
S
O
N
e
v
i
d
e
n
ce
,
an
d
d
e
t
e
r
m
i
n
i
s
t
i
c
s
c
a
n
s
p
o
s
i
t
i
o
n
A
d
a
W
e
b
f
o
r
s
e
a
m
l
e
s
s
i
n
c
l
u
s
i
o
n
in
c
o
n
t
i
n
u
o
u
s
-
i
n
t
eg
r
a
t
i
o
n
p
i
p
e
l
in
e
s
,
wh
er
e
au
t
o
m
a
t
e
d
g
a
te
s
c
an
b
l
o
ck
b
u
i
ld
s
t
h
a
t
r
e
-
in
t
r
o
d
u
c
e
k
n
o
wn
f
l
a
w
s
.
B
y
m
e
e
t
in
g
i
ts
o
r
i
g
in
a
l
o
b
j
e
c
t
iv
e
s
a
n
d
p
r
o
v
i
d
i
n
g
c
l
e
a
r
av
en
u
e
s
f
o
r
ex
p
an
s
i
o
n
,
A
d
a
W
e
b
o
f
f
er
s
a
p
r
a
c
t
i
c
a
l
b
a
s
e
l
i
n
e
f
o
r
b
o
t
h
p
r
o
f
e
s
s
i
o
n
a
l
p
e
n
e
tr
a
t
i
o
n
t
e
s
t
er
s
a
n
d
r
e
s
e
ar
c
h
er
s
e
x
p
l
o
r
i
n
g
n
e
x
t
-
g
e
n
er
a
t
i
o
n
w
eb
-
s
e
cu
r
i
ty
au
t
o
m
a
t
i
o
n
.
F
UNDING
I
NF
O
R
M
A
T
I
O
N
Au
th
o
r
s
s
tate
n
o
f
u
n
d
in
g
in
v
o
lv
ed
.
Evaluation Warning : The document was created with Spire.PDF for Python.
I
SS
N
:
2
7
2
2
-
3
2
2
1
C
o
m
p
u
t Sci
I
n
f
T
ec
h
n
o
l
,
Vo
l.
7
,
No
.
1
,
Ma
r
ch
2
0
2
6
:
1
0
-
1
9
18
AUTHO
R
CO
NT
RI
B
UT
I
O
NS ST
A
T
E
M
E
N
T
T
h
is
jo
u
r
n
al
u
s
es
th
e
C
o
n
tr
ib
u
to
r
R
o
les
T
ax
o
n
o
m
y
(
C
R
ed
iT)
to
r
ec
o
g
n
ize
in
d
iv
id
u
al
au
th
o
r
co
n
tr
ib
u
tio
n
s
,
r
ed
u
ce
au
th
o
r
s
h
ip
d
is
p
u
tes,
an
d
f
ac
ilit
ate
co
llab
o
r
atio
n
.
Na
m
e
o
f
Aut
ho
r
C
M
So
Va
Fo
I
R
D
O
E
Vi
Su
P
Fu
Sy
ed
Am
an
Sh
ah
✓
✓
✓
✓
✓
✓
✓
✓
✓
✓
Vaish
ali
Ku
m
ar
✓
✓
✓
✓
✓
✓
✓
✓
✓
✓
C
:
C
o
n
c
e
p
t
u
a
l
i
z
a
t
i
o
n
M
:
M
e
t
h
o
d
o
l
o
g
y
So
:
So
f
t
w
a
r
e
Va
:
Va
l
i
d
a
t
i
o
n
Fo
:
Fo
r
mal
a
n
a
l
y
s
i
s
I
:
I
n
v
e
s
t
i
g
a
t
i
o
n
R
:
R
e
so
u
r
c
e
s
D
:
D
a
t
a
C
u
r
a
t
i
o
n
O
:
W
r
i
t
i
n
g
-
O
r
i
g
i
n
a
l
D
r
a
f
t
E
:
W
r
i
t
i
n
g
-
R
e
v
i
e
w
&
E
d
i
t
i
n
g
Vi
:
Vi
su
a
l
i
z
a
t
i
o
n
Su
:
Su
p
e
r
v
i
s
i
o
n
P
:
P
r
o
j
e
c
t
a
d
mi
n
i
st
r
a
t
i
o
n
Fu
:
Fu
n
d
i
n
g
a
c
q
u
i
si
t
i
o
n
CO
NF
L
I
C
T
O
F
I
N
T
E
R
E
S
T
ST
A
T
E
M
E
NT
Au
th
o
r
s
s
tate
n
o
co
n
f
lict o
f
in
t
er
est
.
I
NF
O
RM
E
D
CO
NS
E
N
T
No
t
ap
p
licab
le
—
th
is
s
tu
d
y
in
v
o
lv
ed
n
o
h
u
m
a
n
p
ar
ticip
an
ts
,
p
atien
t
d
ata,
o
r
p
er
s
o
n
all
y
id
en
tifia
b
le
in
f
o
r
m
atio
n
; th
er
ef
o
r
e,
in
f
o
r
m
ed
-
co
n
s
en
t
d
o
cu
m
e
n
tatio
n
wa
s
n
o
t r
eq
u
ir
e
d
.
E
T
H
I
CAL AP
P
RO
V
AL
No
t
ap
p
licab
le
—
th
is
s
tu
d
y
in
v
o
lv
ed
n
eith
e
r
h
u
m
an
p
ar
tici
p
an
ts
n
o
r
an
im
al
s
u
b
jects;
th
er
ef
o
r
e,
n
o
eth
ics
-
co
m
m
ittee
o
r
in
s
titu
tio
n
al
-
r
ev
iew
-
b
o
a
r
d
ap
p
r
o
v
al
was r
eq
u
ir
ed
.
DATA AV
AI
L
AB
I
L
I
T
Y
T
h
e
co
d
e
,
co
n
f
ig
u
r
ati
o
n
f
iles
,
s
am
p
le
J
SON
r
ep
o
r
ts
,
an
d
an
n
o
tated
s
cr
ee
n
s
h
o
ts
th
at
s
u
p
p
o
r
t
t
h
e
f
in
d
in
g
s
o
f
th
is
s
tu
d
y
will
b
e
r
elea
s
ed
o
n
GitHu
b
an
d
ar
ch
i
v
ed
o
n
Z
en
o
d
o
(
DOI
to
b
e
m
in
ted
)
im
m
ed
iately
u
p
o
n
f
o
r
m
al
ac
ce
p
tan
ce
o
f
th
e
p
ap
e
r
.
Un
til
th
en
,
th
e
m
ater
ials
ar
e
av
ailab
le
f
r
o
m
th
e
co
r
r
esp
o
n
d
i
n
g
au
th
o
r
,
[
SAS]
,
u
p
o
n
r
ea
s
o
n
ab
le
r
eq
u
e
s
t
.
RE
F
E
R
E
NC
E
S
[
1
]
A
.
M
.
S
l
l
a
m
e
,
T.
E
.
T
o
mi
a
,
a
n
d
R
.
M
.
R
a
h
u
m
a
,
“
A
h
o
l
i
s
t
i
c
a
p
p
r
o
a
c
h
f
o
r
c
y
b
e
r
sec
u
r
i
t
y
v
u
l
n
e
r
a
b
i
l
i
t
y
a
ssess
m
e
n
t
b
a
s
e
d
o
n
o
p
e
n
so
u
r
c
e
t
o
o
l
s:
n
i
k
t
o
,
a
c
u
n
i
t
x
,
ZA
P
,
n
e
ssu
s
a
n
d
e
n
h
a
n
c
e
d
w
i
t
h
A
I
-
p
o
w
e
r
e
d
t
o
o
l
i
mm
u
n
i
w
e
b
,
”
i
n
2
0
2
4
I
EEE
4
t
h
I
n
t
e
rn
a
t
i
o
n
a
l
Ma
g
h
re
b
Me
e
t
i
n
g
o
f
t
h
e
C
o
n
f
e
r
e
n
c
e
o
n
S
c
i
e
n
c
e
s
a
n
d
T
e
c
h
n
i
q
u
e
s
o
f
A
u
t
o
m
a
t
i
c
C
o
n
t
ro
l
a
n
d
C
o
m
p
u
t
e
r
En
g
i
n
e
e
ri
n
g
(
MI
-
S
T
A)
,
M
a
y
2
0
2
4
,
p
p
.
6
8
–
75
,
d
o
i
:
1
0
.
1
1
0
9
/
M
I
-
S
TA
6
1
2
6
7
.
2
0
2
4
.
1
0
5
9
9
6
8
5
.
[
2
]
H
.
H
e
,
L.
C
h
e
n
,
a
n
d
W
.
G
u
o
,
“
R
e
se
a
r
c
h
o
n
w
e
b
a
p
p
l
i
c
a
t
i
o
n
v
u
l
n
e
r
a
b
i
l
i
t
y
sca
n
n
i
n
g
s
y
s
t
e
m
b
a
se
d
o
n
f
i
n
g
e
r
p
r
i
n
t
f
e
a
t
u
r
e
,
”
i
n
2
0
1
7
I
n
t
e
r
n
a
t
i
o
n
a
l
C
o
n
f
e
re
n
c
e
o
n
Me
c
h
a
n
i
c
a
l
,
El
e
c
t
ro
n
i
c
,
C
o
n
t
ro
l
a
n
d
A
u
t
o
m
a
t
i
o
n
En
g
i
n
e
e
ri
n
g
(
ME
C
A
E
2
0
1
7
)
,
2
0
1
7
,
p
p
.
1
5
0
–
1
5
5
,
d
o
i
:
1
0
.
2
9
9
1
/
mec
a
e
-
1
7
.
2
0
1
7
.
2
7
.
[
3
]
B
.
W
a
n
g
,
L
.
L
i
u
,
F
.
L
i
,
J.
Z
h
a
n
g
,
T
.
C
h
e
n
,
a
n
d
Z.
Z
o
u
,
“
R
e
se
a
r
c
h
o
n
w
e
b
a
p
p
l
i
c
a
t
i
o
n
se
c
u
r
i
t
y
v
u
l
n
e
r
a
b
i
l
i
t
y
s
c
a
n
n
i
n
g
t
e
c
h
n
o
l
o
g
y
,
”
i
n
2
0
1
9
I
EE
E
4
t
h
Ad
v
a
n
c
e
d
I
n
f
o
rm
a
t
i
o
n
T
e
c
h
n
o
l
o
g
y
,
El
e
c
t
r
o
n
i
c
a
n
d
A
u
t
o
m
a
t
i
o
n
C
o
n
t
r
o
l
C
o
n
f
e
re
n
c
e
(
I
AE
AC
)
,
D
e
c
.
2
0
1
9
,
p
p
.
1
5
2
4
–
1
5
2
8
,
d
o
i
:
1
0
.
1
1
0
9
/
I
A
EA
C
4
7
3
7
2
.
2
0
1
9
.
8
9
9
7
9
6
4
.
[
4
]
Q
.
Li
,
L
.
W
a
n
g
,
C
.
C
h
e
n
,
W
.
Zh
e
n
g
,
Z.
G
u
o
,
a
n
d
X
.
W
u
,
“
A
p
p
l
i
c
a
t
i
o
n
o
f
sq
l
ma
p
i
n
S
Q
L
i
n
j
e
c
t
i
o
n
v
u
l
n
e
r
a
b
i
l
i
t
y
d
e
t
e
c
t
i
o
n
,
”
i
n
2
0
2
4
I
n
t
e
r
n
a
t
i
o
n
a
l
S
e
m
i
n
a
r
o
n
Art
i
f
i
c
i
a
l
I
n
t
e
l
l
i
g
e
n
c
e
,
C
o
m
p
u
t
e
r
T
e
c
h
n
o
l
o
g
y
a
n
d
C
o
n
t
r
o
l
E
n
g
i
n
e
e
r
i
n
g
(
A
C
T
C
E)
,
S
e
p
.
2
0
2
4
,
p
p
.
4
3
4
–
437
,
d
o
i
:
1
0
.
1
1
0
9
/
A
C
T
C
E
6
5
0
8
5
.
2
0
2
4
.
0
0
0
9
4
.
[
5
]
A
.
B
.
S
a
m
g
i
r
,
V
.
G
u
t
t
e
,
K
.
K
o
l
h
e
,
a
n
d
D
.
R
.
P
a
t
i
l
,
“
A
u
t
o
m
a
t
e
d
p
e
n
e
t
r
a
t
i
o
n
t
e
st
i
n
g
a
r
c
h
i
t
e
c
t
u
r
e
u
s
i
n
g
met
a
s
p
l
o
i
t
a
n
d
O
W
A
S
P
ZA
P
f
o
r
w
e
b
a
p
p
l
i
c
a
t
i
o
n
s,
”
i
n
2
0
2
4
2
n
d
I
n
t
e
r
n
a
t
i
o
n
a
l
C
o
n
f
e
r
e
n
c
e
o
n
S
u
st
a
i
n
a
b
l
e
C
o
m
p
u
t
i
n
g
a
n
d
S
m
a
rt
S
y
s
t
e
m
s
(
I
C
S
C
S
S
)
,
J
u
l
.
2
0
2
4
,
p
p
.
6
4
9
–
657
,
d
o
i
:
1
0
.
1
1
0
9
/
I
C
S
C
S
S
6
0
6
6
0
.
2
0
2
4
.
1
0
6
2
5
0
3
3
.
[
6
]
S
.
T
y
a
g
i
a
n
d
K
.
K
u
m
a
r
,
“
E
v
a
l
u
a
t
i
o
n
o
f
st
a
t
i
c
w
e
b
v
u
l
n
e
r
a
b
i
l
i
t
y
a
n
a
l
y
si
s
t
o
o
l
s,
”
i
n
2
0
1
8
F
i
f
t
h
I
n
t
e
r
n
a
t
i
o
n
a
l
C
o
n
f
e
re
n
c
e
o
n
Pa
r
a
l
l
e
l
,
D
i
st
r
i
b
u
t
e
d
a
n
d
G
ri
d
C
o
m
p
u
t
i
n
g
(
PD
G
C
)
,
D
e
c
.
2
0
1
8
,
p
p
.
1
–
6
,
d
o
i
:
1
0
.
1
1
0
9
/
P
D
G
C
.
2
0
1
8
.
8
7
4
5
9
9
6
.
[
7
]
H
.
W
u
,
F
.
Li
u
,
L.
Zh
a
o
,
a
n
d
Y
.
S
h
a
o
,
“
D
a
t
a
a
n
a
l
y
si
s
a
n
d
c
r
a
w
l
e
r
a
p
p
l
i
c
a
t
i
o
n
i
mp
l
e
m
e
n
t
a
t
i
o
n
b
a
se
d
o
n
P
y
t
h
o
n
,
”
i
n
2
0
2
0
I
n
t
e
r
n
a
t
i
o
n
a
l
C
o
n
f
e
re
n
c
e
o
n
C
o
m
p
u
t
e
r
N
e
t
w
o
rk,
El
e
c
t
r
o
n
i
c
a
n
d
A
u
t
o
m
a
t
i
o
n
(
I
C
C
N
EA)
,
S
e
p
.
2
0
2
0
,
p
p
.
3
8
9
–
3
9
3
,
d
o
i
:
1
0
.
1
1
0
9
/
I
C
C
N
EA
5
0
2
5
5
.
2
0
2
0
.
0
0
0
8
6
.
[
8
]
H
.
A
l
-
A
mr
o
a
n
d
E.
El
-
Q
a
w
a
sme
h
,
“
D
i
sc
o
v
e
r
i
n
g
s
e
c
u
r
i
t
y
v
u
l
n
e
r
a
b
i
l
i
t
i
e
s
a
n
d
l
e
a
k
s
i
n
A
S
P
.
N
ET
w
e
b
s
i
t
e
s,
”
Pro
c
e
e
d
i
n
g
s
2
0
1
2
I
n
t
e
r
n
a
t
i
o
n
a
l
C
o
n
f
e
re
n
c
e
o
n
C
y
b
e
r
S
e
c
u
r
i
t
y
,
C
y
b
e
r
W
a
rf
a
re
a
n
d
D
i
g
i
t
a
l
Fo
r
e
n
s
i
c
,
C
y
b
e
rS
e
c
2
0
1
2
,
p
p
.
3
2
9
–
3
3
3
,
2
0
1
2
,
d
o
i
:
1
0
.
1
1
0
9
/
C
y
b
e
r
S
e
c
.
2
0
1
2
.
6
2
4
6
1
7
5
.
[
9
]
P
.
R
a
my
a
,
V
.
S
i
n
d
h
u
r
a
,
a
n
d
P
.
V
.
S
a
g
a
r
,
“
Te
s
t
i
n
g
u
si
n
g
se
l
e
n
i
u
m
w
e
b
d
r
i
v
e
r
,
”
2
0
1
7
S
e
c
o
n
d
I
n
t
e
rn
a
t
i
o
n
a
l
C
o
n
f
e
r
e
n
c
e
o
n
El
e
c
t
r
i
c
a
l
,
C
o
m
p
u
t
e
r
a
n
d
C
o
m
m
u
n
i
c
a
t
i
o
n
T
e
c
h
n
o
l
o
g
i
e
s (I
C
EC
C
T
)
,
2
0
1
7
,
p
p
.
1
-
7
,
d
o
i
:
1
0
.
1
1
0
9
/
I
C
EC
C
T
.
2
0
1
7
.
8
1
1
7
8
7
8
.
Evaluation Warning : The document was created with Spire.PDF for Python.
C
o
m
p
u
t Sci
I
n
f
T
ec
h
n
o
l
I
SS
N:
2722
-
3
2
2
1
A
d
a
Web
:
a
s
ta
ck
-
a
d
a
p
tive
fr
a
mewo
r
k
fo
r
a
u
to
ma
ted
w
eb
-
vu
ln
era
b
ilit
y
a
s
s
ess
men
t
…
(
S
ye
d
A
ma
n
S
h
a
h
)
19
[
1
0
]
A
.
P
a
n
a
n
d
H
.
P
a
n
,
“
D
e
si
g
n
a
n
d
i
m
p
l
e
me
n
t
a
t
i
o
n
o
f
w
e
b
c
r
a
w
l
e
r
sy
st
e
m
b
a
sed
o
n
P
y
t
h
o
n
,
”
2
0
2
3
8
t
h
I
n
t
e
rn
a
t
i
o
n
a
l
C
o
n
f
e
re
n
c
e
o
n
I
n
f
o
rm
a
t
i
o
n
S
y
st
e
m
s E
n
g
i
n
e
e
ri
n
g
,
I
C
I
S
E
2
0
2
3
,
2
0
2
3
,
p
p
.
9
1
–
9
4
,
d
o
i
:
1
0
.
1
1
0
9
/
I
C
I
S
E6
0
3
6
6
.
2
0
2
3
.
0
0
0
2
5
.
[
1
1
]
Y
.
W
a
n
g
,
“
R
e
s
e
a
r
c
h
o
n
P
y
t
h
o
n
c
r
a
w
l
e
r
se
a
r
c
h
s
y
s
t
e
m
b
a
se
d
o
n
c
o
m
p
u
t
e
r
b
i
g
d
a
t
a
,
”
i
n
2
0
2
3
I
E
EE
3
r
d
I
n
t
e
r
n
a
t
i
o
n
a
l
C
o
n
f
e
re
n
c
e
o
n
Po
w
e
r
,
El
e
c
t
ro
n
i
c
s
a
n
d
C
o
m
p
u
t
e
r
A
p
p
l
i
c
a
t
i
o
n
s
(
I
C
PEC
A)
,
Ja
n
.
2
0
2
3
,
p
p
.
1
1
7
9
–
1
1
8
3
,
d
o
i
:
1
0
.
1
1
0
9
/
I
C
P
EC
A
5
6
7
0
6
.
2
0
2
3
.
1
0
0
7
5
8
3
5
.
[
1
2
]
N
.
J.
H
u
a
n
g
,
C
.
J.
H
u
a
n
g
,
a
n
d
S
.
K
.
H
u
a
n
g
,
“
P
a
i
n
p
i
c
k
l
e
:
b
y
p
a
s
si
n
g
P
y
t
h
o
n
r
e
st
r
i
c
t
e
d
u
n
p
i
c
k
l
e
r
f
o
r
a
u
t
o
ma
t
i
c
e
x
p
l
o
i
t
g
e
n
e
r
a
t
i
o
n
,
”
I
EEE
I
n
t
e
r
n
a
t
i
o
n
a
l
C
o
n
f
e
r
e
n
c
e
o
n
S
o
f
t
w
a
r
e
Q
u
a
l
i
t
y
,
R
e
l
i
a
b
i
l
i
t
y
a
n
d
S
e
c
u
r
i
t
y
,
Q
R
S
,
p
p
.
1
0
7
9
–
1
0
9
0
,
2
0
2
2
,
d
o
i
:
1
0
.
1
1
0
9
/
Q
R
S
5
7
5
1
7
.
2
0
2
2
.
0
0
1
1
1
.
[
1
3
]
S
.
W
e
n
a
n
d
W
.
D
a
n
g
,
“
R
e
s
e
a
r
c
h
o
n
b
a
s
e
6
4
e
n
c
o
d
i
n
g
a
l
g
o
r
i
t
h
m
a
n
d
P
H
P
i
mp
l
e
m
e
n
t
a
t
i
o
n
,
”
2
0
1
8
2
6
t
h
I
n
t
e
r
n
a
t
i
o
n
a
l
C
o
n
f
e
re
n
c
e
o
n
G
e
o
i
n
f
o
rm
a
t
i
c
s,
2
0
1
8
,
p
p
.
1
-
5,
d
o
i
:
1
0
.
1
1
0
9
/
G
EO
I
N
F
O
R
M
A
TI
C
S
.
2
0
1
8
.
8
5
5
7
0
6
8
.
[
1
4
]
M
.
Li
u
,
B
.
Zh
a
n
g
,
W
.
C
h
e
n
,
a
n
d
X
.
Z
h
a
n
g
,
“
A
s
u
r
v
e
y
o
f
e
x
p
l
o
i
t
a
t
i
o
n
a
n
d
d
e
t
e
c
t
i
o
n
m
e
t
h
o
d
s
o
f
X
S
S
v
u
l
n
e
r
a
b
i
l
i
t
i
e
s,
”
I
E
EE
Ac
c
e
ss
,
v
o
l
.
7
,
p
p
.
1
8
2
0
0
4
–
1
8
2
0
1
6
,
2
0
1
9
,
d
o
i
:
1
0
.
1
1
0
9
/
A
C
C
ESS
.
2
0
1
9
.
2
9
6
0
4
4
9
.
[
1
5
]
R
.
D
.
C
h
a
n
d
n
a
,
P
.
C
h
a
u
b
e
y
,
a
n
d
S
.
C
.
G
u
p
t
a
,
“
D
e
f
e
n
se
r
e
s
p
o
n
s
e
o
f
se
a
r
c
h
e
n
g
i
n
e
w
e
b
s
i
t
e
s
t
o
n
o
n
c
o
o
p
e
r
a
t
i
n
g
c
r
a
w
l
e
r
s,”
2
0
1
2
Wo
r
l
d
C
o
n
g
r
e
ss
o
n
I
n
f
o
rm
a
t
i
o
n
a
n
d
C
o
m
m
u
n
i
c
a
t
i
o
n
T
e
c
h
n
o
l
o
g
i
e
s
,
2
0
1
2
,
p
p
.
2
1
9
–
2
2
3
,
d
o
i
:
1
0
.
1
1
0
9
/
W
I
C
T.
2
0
1
2
.
6
4
0
9
0
7
8
.
[
1
6
]
T.
N
i
e
,
Z
.
W
a
n
g
,
Y
.
K
o
u
,
a
n
d
R
.
Z
h
a
n
g
,
“
C
r
a
w
l
i
n
g
r
e
s
u
l
t
p
a
g
e
s
f
o
r
d
a
t
a
e
x
t
r
a
c
t
i
o
n
b
a
se
d
o
n
U
R
L
c
l
a
ssi
f
i
c
a
t
i
o
n
,
”
2
0
1
0
S
e
v
e
n
t
h
We
b
I
n
f
o
rm
a
t
i
o
n
S
y
st
e
m
s
a
n
d
A
p
p
l
i
c
a
t
i
o
n
s
C
o
n
f
e
r
e
n
c
e
,
2
0
1
0
,
p
p
.
7
9
–
8
4
,
d
o
i
:
1
0
.
1
1
0
9
/
W
I
S
A
.
2
0
1
0
.
1
4
.
[
1
7
]
A
.
W
.
M
a
r
a
s
h
d
i
h
,
Z.
F
.
Za
a
b
a
,
a
n
d
K
.
S
u
w
a
i
s,
“
C
r
o
s
s
s
i
t
e
scr
i
p
t
i
n
g
:
i
n
v
e
st
i
g
a
t
i
o
n
s
i
n
P
H
P
w
e
b
a
p
p
l
i
c
a
t
i
o
n
,
”
2
0
1
8
I
n
t
e
r
n
a
t
i
o
n
a
l
C
o
n
f
e
re
n
c
e
o
n
Pr
o
m
i
s
i
n
g
E
l
e
c
t
r
o
n
i
c
T
e
c
h
n
o
l
o
g
i
e
s
,
I
C
PET
2
0
1
8
,
2
0
1
8
,
p
p
.
2
5
–
3
0
,
d
o
i
:
1
0
.
1
1
0
9
/
I
C
P
ET.
2
0
1
8
.
0
0
0
1
1
.
[
1
8
]
J.
W
a
n
g
a
n
d
X
.
L
i
u
,
“
R
e
sea
r
c
h
o
n
so
f
t
w
a
r
e
s
e
c
u
r
i
t
y
b
a
se
d
o
n
D
V
W
A
,
”
i
n
2
0
2
3
I
EEE
3
r
d
I
n
t
e
rn
a
t
i
o
n
a
l
C
o
n
f
e
re
n
c
e
o
n
E
l
e
c
t
r
o
n
i
c
T
e
c
h
n
o
l
o
g
y
,
C
o
m
m
u
n
i
c
a
t
i
o
n
a
n
d
I
n
f
o
rm
a
t
i
o
n
(
I
C
ETCI)
,
M
a
y
2
0
2
3
,
p
p
.
3
8
–
42
,
d
o
i
:
1
0
.
1
1
0
9
/
I
C
ET
C
I
5
7
8
7
6
.
2
0
2
3
.
1
0
1
7
6
4
8
1
.
[
1
9
]
X
.
G
u
o
,
S
.
J
i
n
,
a
n
d
Y
.
Z
h
a
n
g
,
“
X
S
S
v
u
l
n
e
r
a
b
i
l
i
t
y
d
e
t
e
c
t
i
o
n
u
si
n
g
o
p
t
i
m
i
z
e
d
a
t
t
a
c
k
v
e
c
t
o
r
r
e
p
e
r
t
o
r
y
,
”
2
0
1
5
I
n
t
e
r
n
a
t
i
o
n
a
l
C
o
n
f
e
re
n
c
e
o
n
C
y
b
e
r
-
E
n
a
b
l
e
d
D
i
st
ri
b
u
t
e
d
C
o
m
p
u
t
i
n
g
a
n
d
K
n
o
w
l
e
d
g
e
D
i
sc
o
v
e
ry,
C
y
b
e
rC
2
0
1
5
,
2
0
1
5
,
p
p
.
2
9
–
3
6
,
d
o
i
:
1
0
.
1
1
0
9
/
C
y
b
e
r
C
.
2
0
1
5
.
5
0
.
[
2
0
]
M
.
Q
a
d
e
r
i
,
G
.
S
i
n
h
a
,
a
n
d
D
.
K
.
S
i
n
h
a
,
“
V
u
l
n
e
r
a
b
i
l
i
t
y
d
e
t
e
c
t
i
o
n
a
n
d
se
c
u
r
i
t
y
e
n
h
a
n
c
i
n
g
u
si
n
g
X
A
M
P
P
,
O
W
A
S
P
a
n
d
D
V
W
A
,
”
i
n
2
0
2
3
I
n
t
e
rn
a
t
i
o
n
a
l
C
o
n
f
e
r
e
n
c
e
o
n
C
o
m
p
u
t
e
r
S
c
i
e
n
c
e
a
n
d
Em
e
r
g
i
n
g
T
e
c
h
n
o
l
o
g
i
e
s
(
C
S
ET)
,
O
c
t
.
2
0
2
3
,
p
p
.
1
–
4
,
d
o
i
:
1
0
.
1
1
0
9
/
C
S
ET
5
8
9
9
3
.
2
0
2
3
.
1
0
3
4
6
7
3
4
.
[
2
1
]
A
.
V
e
r
ma
,
“
I
n
se
c
u
r
e
d
e
ser
i
a
l
i
z
a
t
i
o
n
d
e
t
e
c
t
i
o
n
i
n
P
y
t
h
o
n
,
”
M
a
st
e
r'
s
Pr
o
j
e
c
t
s,
D
e
p
a
r
t
m
e
n
t
o
f
C
o
mp
u
t
e
r
S
c
i
e
n
c
e
,
S
a
n
Jo
s
é
S
t
a
t
e
U
n
i
v
e
r
si
t
y
,
S
a
n
Jo
s
e
,
C
a
l
i
f
o
r
n
i
a
,
2
0
2
3
,
d
o
i
:
1
0
.
3
1
9
7
9
/
e
t
d
.
3
y
z
t
-
6
h
x
p
.
[
2
2
]
R
.
M
.
B
a
l
a
j
e
e
,
V
.
M
.
M
o
h
a
n
,
a
n
d
K
.
M
.
J
.
K
a
n
n
a
n
,
“
P
e
r
f
o
r
ma
n
c
e
a
n
a
l
y
s
i
s
o
f
b
a
g
o
f
p
a
ssw
o
r
d
a
u
t
h
e
n
t
i
c
a
t
i
o
n
u
s
i
n
g
P
y
t
h
o
n
,
j
a
v
a
a
n
d
P
H
P
i
m
p
l
e
me
n
t
a
t
i
o
n
,
”
2
0
2
1
6
t
h
I
n
t
e
r
n
a
t
i
o
n
a
l
C
o
n
f
e
re
n
c
e
o
n
C
o
m
m
u
n
i
c
a
t
i
o
n
a
n
d
El
e
c
t
ro
n
i
c
s
S
y
s
t
e
m
s
(
I
C
C
ES
)
,
C
o
i
mb
a
t
r
e
,
I
n
d
i
a
,
2
0
2
1
,
p
p
.
1
0
3
2
-
1
0
3
9
,
d
o
i
:
1
0
.
1
1
0
9
/
I
C
C
ES5
1
3
5
0
.
2
0
2
1
.
9
4
8
9
2
3
3
.
[
2
3
]
O
.
O
j
a
g
b
u
l
e
,
H
.
W
i
mm
e
r
,
a
n
d
R
.
J.
H
a
d
d
a
d
,
“
V
u
l
n
e
r
a
b
i
l
i
t
y
a
n
a
l
y
si
s
o
f
c
o
n
t
e
n
t
ma
n
a
g
e
me
n
t
s
y
s
t
e
ms
t
o
S
Q
L
i
n
j
e
c
t
i
o
n
u
si
n
g
S
Q
LM
A
P
,
”
i
n
S
o
u
t
h
e
a
s
t
C
o
n
2
0
1
8
,
A
p
r
.
2
0
1
8
,
p
p
.
1
–
7
,
d
o
i
:
1
0
.
1
1
0
9
/
S
EC
O
N
.
2
0
1
8
.
8
4
7
9
1
3
0
.
[
2
4
]
H
.
S
.
A
b
d
u
l
l
a
h
,
Z.
O
.
H
a
m
a
d
,
a
n
d
O
.
S
.
K
h
a
l
i
n
d
,
“
A
n
a
l
y
s
i
s o
f
S
Q
L
M
A
P
e
f
f
i
c
a
c
y
i
n
e
x
p
l
o
i
t
i
n
g
sq
l
i
n
j
e
c
t
i
o
n
v
u
l
n
e
r
a
b
i
l
i
t
i
e
s i
n
w
e
b
a
p
p
l
i
c
a
t
i
o
n
s:
a
c
a
se
st
u
d
y
o
n
D
V
W
A
,
”
i
n
2
0
2
3
I
n
t
e
rn
a
t
i
o
n
a
l
C
o
n
f
e
re
n
c
e
o
n
En
g
i
n
e
e
ri
n
g
Ap
p
l
i
e
d
a
n
d
N
a
n
o
S
c
i
e
n
c
e
s
(
I
C
EA
N
S
)
,
O
c
t
.
2
0
2
3
,
p
p
.
1
3
–
18
,
d
o
i
:
1
0
.
1
1
0
9
/
I
C
EA
N
S
5
8
4
1
3
.
2
0
2
3
.
1
0
6
3
0
4
5
4
.
[
2
5
]
H
.
A
n
t
u
n
e
s
a
n
d
I
.
D
.
S
.
A
.
D
.
F
o
n
se
c
a
,
“
A
d
v
a
n
c
e
d
w
e
b
m
e
t
h
o
d
o
l
o
g
y
f
o
r
f
l
e
x
i
b
l
e
w
e
b
d
e
v
e
l
o
p
me
n
t
,
”
0
2
1
1
6
t
h
I
b
e
r
i
a
n
C
o
n
f
e
re
n
c
e
o
n
I
n
f
o
rm
a
t
i
o
n
S
y
s
t
e
m
s
a
n
d
T
e
c
h
n
o
l
o
g
i
e
s
(
C
I
S
T
I
)
,
C
h
a
v
e
s,
P
o
r
t
u
g
a
l
,
2
0
2
1
,
p
p
.
1
-
4,
d
o
i
:
1
0
.
2
3
9
1
9
/
C
I
S
T
I
5
2
0
7
3
.
2
0
2
1
.
9
4
7
6
2
9
5
.
B
I
O
G
RAP
H
I
E
S O
F
AUTH
O
RS
S
y
e
d
A
m
a
n
S
h
a
h
is
a
n
u
n
d
e
rg
ra
d
u
a
te
stu
d
e
n
t
p
u
rsu
in
g
a
B.
T
e
c
h
.
in
C
o
m
p
u
ter
S
c
ien
c
e
a
n
d
En
g
i
n
e
e
rin
g
(C
y
b
e
r
S
e
c
u
rit
y
)
a
t
D
.
Y
P
a
ti
l
In
tern
a
ti
o
n
a
l
Un
i
v
e
rsity
,
P
u
n
e
.
T
h
is
wo
rk
h
a
s
b
e
e
n
c
o
n
d
u
c
ted
a
s
t
h
e
p
ro
jec
t
wo
r
k
u
n
d
e
r
th
e
B
.
Tec
h
.
p
ro
g
ra
m
.
His
a
c
h
iev
e
m
e
n
ts
in
c
lu
d
e
se
c
u
rin
g
1
st
p
lac
e
in
C
y
th
o
n
2
0
2
4
(a
n
i
n
it
iati
v
e
b
y
NCIIPC
a
n
d
F
IT
T,
IIT
De
lh
i)
,
a
tt
a
in
in
g
All
-
In
d
ia
Ra
n
k
8
5
in
A
n
v
e
sh
a
n
a
m
’2
4
(a
n
a
ti
o
n
a
l
CTF
o
rg
a
n
i
z
e
d
b
y
IIT
Ja
m
m
u
in
c
o
ll
a
b
o
ra
ti
o
n
wit
h
DRD
O),
a
n
d
a
c
h
iev
in
g
I
n
tern
a
ti
o
n
a
l
Ra
n
k
3
1
in
US
Cy
b
e
r
Qu
e
st.
He
c
a
n
b
e
c
o
n
tac
ted
a
t
e
m
a
il
:
2
0
2
1
0
8
0
2
0
1
7
@d
y
p
iu
.
a
c
.
i
n
.
Va
ish
a
li
K
u
m
a
r
is
wo
rk
i
n
g
a
t
M
IT
Ac
a
d
e
m
y
o
f
E
n
g
i
n
e
e
rin
g
in
P
u
n
e
.
S
h
e
c
o
m
p
lete
d
h
e
r
M
.
Tec
h
.
i
n
C
S
E
with
a
g
o
ld
m
e
d
a
l
fro
m
ITM
U
n
i
v
e
rsity
,
G
u
ru
g
ra
m
,
Ha
ry
a
n
a
.
S
h
e
is
n
o
w
p
u
rsu
i
n
g
a
P
h
.
D
.
in
C
y
b
e
rse
c
u
rit
y
.
He
r
re
se
a
rc
h
fo
c
u
se
s
in
c
lu
d
e
m
a
lwa
re
d
e
tec
ti
o
n
,
in
tru
si
o
n
d
e
tec
ti
o
n
,
a
n
d
c
o
m
p
u
ter
f
o
re
n
sic
s
.
S
h
e
c
a
n
b
e
c
o
n
tac
ted
a
t
e
m
a
il
:
v
a
ish
a
li
.
k
u
m
a
r@d
y
p
iu
.
a
c
.
in
Evaluation Warning : The document was created with Spire.PDF for Python.