1

YuraScanner: Leveraging LLMs for Task-driven Web App Scanning

Rag and Roll: An End-to-End Evaluation of Indirect Prompt Manipulations in LLM-based Application Frameworks

SoK: State of the Krawlers - Evaluating the Effectiveness of Crawling Algorithms for Web Security Measurements

SSRF vs. Developers: A Study of SSRF-Defenses in PHP Applications

The Big Brother's New Playground: Unmasking the Illusion of Privacy in Web Metaverses from a Malicious User's Perspective

The Great Request Robbery: An Empirical Study of Client-side Request Hijacking Vulnerabilities on the Web

Uncovering the Role of Support Infrastructure in Clickbait PDF Campaigns

From Attachments to SEO: Click Here to Learn More about Clickbait PDFs!

It's (DOM) Clobbering Time: Attack Techniques, Prevalence, and Defenses

The Leaky Web: Automated Discovery of Cross-Site Information Leaks in Browsers and the Web