Publications

Foxhound has been used in a wide range of academic publications. Among others:

• Talking About My Generation: Targeted DOM-based XSS Exploit Generation using Dynamic Data Flow Analysis (EuroSec '21) [BIB]

• Hand Sanitizers in the Wild: A Large-scale Study of Custom JavaScript Sanitizer Functions (EuroS&P '22) [BIB]

• Accept All Exploits: Exploring the Security Impact of Cookie Banners (ACSAC '22) [BIB]

• Load-and-Act: Increasing Page Coverage of Web Applications (ISC '23)

• Dancer in the Dark: Synthesizing and Evaluating Polyglots for Blind Cross-Site Scripting (Usenix Security '24) [BIB]

• FP-tracer: Fine-grained Browser Fingerprinting Detection via Taint-tracking and Multi-level Entropy-based Thresholds (PETS '24) [BIB]

• The Great Request Robbery: An Empirical Study of Client-side Request Hijacking Vulnerabilities on the Web (S&P '24)

• To Auth or Not To Auth? A Comparative Analysis of the Pre- and Post-Login Security Landscape (S&P '24)

• Information flow control for comparative privacy analyses (International Journal of Information Security '24)

If you have used Foxhound in a publication and want us to list it, please open an issue!