Bringing UFUs Back into the Air with FUEL: A Framework for Evaluating the Effectiveness of Unrestricted File Upload Vulnerability Scanners
Results and benchmarks
Bringing UFUs Back into the Air with FUEL: A Framework for Evaluating the Effectiveness of Unrestricted File Upload Vulnerability Scanners focuses on upload.
Benchmark evidence is limited
Evidence graph: 2 refs, 1 links.
Utility signals: depth 65/100, grounding 58/100, status medium.
Implementation
No direct implementation yet
Maintained implementation evidence is not confirmed for this paper yet.
Use the implementation status and reproduction sections for the current action plan.
No verified maintained repo yet
There is no verified maintained implementation yet. Use this baseline plan to decide whether to prototype now or defer.
- No direct maintained implementation was found. Use the paper PDF and citation graph to design a baseline reproduction.
- Start from related paper: URadar: Discovering Unrestricted File Upload Vulnerabilities via Adaptive Dynamic Testing.
- Track assumptions and missing details in an experiment log before coding.
Time to first repro: a few days
Recommendation evidence is currently too limited for a maintained-repo choice. Use Implementation Status and Reproduction Path for a practical baseline plan.
- Estimate is based on paper-only reproduction flow
Reproduction readiness
No repo
No verified implementation available
- No maintained repository has been identified for this paper. Check adjacent implementations or HF artifacts below.
Hardware requirements
- Expect multi-day setup/compute for meaningful reproduction based on current guidance.
Validation caveat
Hugging Face artifacts
No trustworthy direct or curated related Hugging Face artifacts were found yet. Use targeted searches to quickly locate candidate models, datasets, and demos.
Tip: start with models, then check datasets and spaces if you need evaluation data or demos.
Research context
2
Citations
15
References
Tasks
Upload, Computer science, Vulnerability (computing), Database, Operating system, web application vulnerabilities, reproducible evaluation, false-negative results
Methods
None detected
Domains
Computer security
Related papers
- URadar: Discovering Unrestricted File Upload Vulnerabilities via Adaptive Dynamic TestingSearch on Paper2Code
2023 · Semantic similarity
- FUSE: Finding File Upload Bugs via Penetration TestingSearch on Paper2Code
2020 · Semantic similarity
- UFuzzer: Lightweight Detection of PHP-Based Unrestricted File Upload Vulnerabilities Via Static-Fuzzing Co-AnalysisSearch on Paper2Code
2021 · Semantic similarity
- Detecting Server-Side Web Applications with Unrestricted File Upload VulnerabilitiesSearch on Paper2Code
2021 · Semantic similarity
- UChecker: Automatically Detecting PHP-Based Unrestricted File Upload VulnerabilitiesSearch on Paper2Code
2019 · Semantic similarity
- A free and extensible tool to detect vulnerabilities in Web systemsSearch on Paper2Code
2012 · Semantic similarity
Open this paper in HFEPX to review benchmark signals, evaluation modes, and human-feedback protocol context.
Open in HFEPXJump to Paper2Code search queries derived from this paper's research context.