Understanding and Detecting Performance Bugs in Markdown Compilers. - Penghui Li 001; Yinxi Liu; Wei Meng 001 (ASE, 2021)

LChecker: Detecting Loose Comparison Bugs in PHP. - Penghui Li 001; Wei Meng 001 (WWW, 2021)

On the Feasibility of Automated Built-in Function Modeling for PHP Symbolic Execution. - Penghui Li 001; Wei Meng 001; Kangjie Lu; Changhua Luo (WWW, 2021)

TChecker: Precise Static Inter-Procedural Analysis for Detecting Taint-Style Vulnerabilities in PHP Applications. - Changhua Luo; Penghui Li 001; Wei Meng 001 (CCS, 2022)

SEDiff: scope-aware differential fuzzing to test internal function models in symbolic execution. - Penghui Li 001; Wei Meng 001; Kangjie Lu (ESEC/SIGSOFT FSE, 2022)

SelectFuzz: Efficient Directed Fuzzing with Selective Path Exploration. - Changhua Luo; Wei Meng 001; Penghui Li 001 (SP, 2023)

DDRace: Finding Concurrency UAF Vulnerabilities in Linux Drivers with Directed Fuzzing. - Ming Yuan 003; Bodong Zhao; Penghui Li 001; Jiashuo Liang; Xinhui Han; Xiapu Luo; Chao Zhang 008 (USENIX Security Symposium, 2023)

Testing Graph Database Systems via Graph-Aware Metamorphic Relations. - Zeyang Zhuang; Penghui Li 001; Pingchuan Ma 004; Wei Meng 001; Shuai Wang 011 (Proc. VLDB Endow., 2023)

FuzzCache: Optimizing Web Application Fuzzing Through Software-Based Data Cache. - Penghui Li 001; Mingxue Zhang 001 (CCS, 2024)

Test Suites Guided Vulnerability Validation for Node.js Applications. - Changhua Luo; Penghui Li 001; Wei Meng 001; Chao Zhang 008 (CCS, 2024)

Holistic Concolic Execution for Dynamic Web Applications via Symbolic Interpreter Analysis. - Penghui Li 001; Wei Meng 001; Mingxue Zhang 001; Chenlin Wang; Changhua Luo (SP, 2024)

SDFuzz: Target States Driven Directed Fuzzing. - Penghui Li 001; Wei Meng 001; Chao Zhang 008 (USENIX Security Symposium, 2024)

VulShield: Protecting Vulnerable Code Before Deploying Patches. - Yuan Li 061; Chao Zhang 008; Jinhao Zhu; Penghui Li 001; Chenyang Li; Songtao Yang; Wende Tan (NDSS, 2025)

Predator: Directed Web Application Fuzzing for Efficient Vulnerability Validation. - Chenlin Wang; Wei Meng 001; Changhua Luo; Penghui Li 001 (SP, 2025)

Explainer-guided Targeted Adversarial Attacks against Binary Code Similarity Detection Models. - Mingjie Chen; Tiancheng Zhu; Mingxue Zhang 001; Yiling He; Minghao Lin; Penghui Li 001; Kui Ren 001 (CoRR, 2025)