11 citations · 13 across the 8 of their papers we have counts for
10 papers
Plug 'n' Pray: Agentic LLM-based Detection of Potential Log File Exposures in Third-Party Content Management System Plugins
Sebastian Neef
Content Management Systems (CMS), such as WordPress, power a large share of the web (~58%), and their extensibility through third-party plugins is a major source of their popularit…
Poster: To Play or Not to Play: Insights and Lessons Learned from 20 Years of CTFs with ENOFLAG
Jörg Schneider, Sebastian Neef, Sebastian Koch
Security contests in the form of CTF (Capture The Flag) exercises are nowadays a common way to learn cyber security. 20 years ago at DIMVA 2006 the on-site CTF CIPHER II was one of…
Do (Not) Tell Me About My Insecurities: Assessing the Status Quo of Coordinated Vulnerability Disclosure in Germany Amid New EU Cybersecurity Regulations
Sebastian Neef, Cenk Schlunke, Anne Hennig
In our increasingly interconnected world, good IT security practices are necessary to prevent vulnerabilities and data breaches. Providing security contacts, e.g., via Coordinated…
Evaluating LLMs for Real-World Web Vulnerability Detection
Sebastian Neef, Luca Jungnickel, Antonio Benjamin Buchholz +2
Large Language Models (LLMs) have emerged as a promising tool for automated vulnerability detection, yet their effectiveness on web-specific vulnerabilities remains to be explored.…
What All the PHUZZ Is About: A Coverage-guided Fuzzer for Finding Vulnerabilities in PHP Web Applications
Sebastian Neef, Lorenz Kleissner, Jean-Pierre Seifert
Coverage-guided fuzz testing has received significant attention from the research community, with a strong focus on binary applications, greatly disregarding other targets, such as…
Bringing UFUs Back into the Air With FUEL: A Framework for Evaluating the Effectiveness of Unrestricted File Upload Vulnerability Scanners
Sebastian Neef, Maath Oudeh
Unrestricted file upload (UFU) is a class of web security vulnerabilities that can have a severe impact on web applications if uploaded files are not sufficiently validated or secu…
A review of the security role of ISP mandated ONUs and ONTs in GPONs
Max Franke, Sebastian Neef
Home fiber connections are largely realized by using passive optical networks, in their most common form today relying on the GPON standard. Among other things, this standard speci…
Uncovering Fingerprinting Networks. An Analysis of In-Browser Tracking using a Behavior-based Approach
Sebastian Neef
Throughout recent years, the importance of internet-privacy has continuously risen. [...] Browser fingerprinting is a technique that does not require cookies or persistent identifi…
Oh SSH-it, what's my fingerprint? A Large-Scale Analysis of SSH Host Key Fingerprint Verification Records in the DNS
Sebastian Neef, Nils Wisiol
The SSH protocol is commonly used to access remote systems on the Internet, as it provides an encrypted and authenticated channel for communication. If upon establishing a new conn…
Implementation and Evaluation of a Framework to calculate Impact Measures for Wikipedia Authors
Sebastian Neef
Wikipedia, an open collaborative website, can be edited by anyone, even anonymously, thus becoming victim to ill-intentioned changes. Therefore, ranking Wikipedia authors by calcul…