XSS PEEKER: Dissecting the XSS Exploitation Techniques and Fuzzing Mechanisms of Blackbox Web Application Scanners.
E. Bazzoli, C. Criscione, F. Maggi, and S. Zanero. SEC, volume 471 of IFIP Advances in Information and Communication Technology, page 243-258. Springer, (2016)