11 citations · 13 across the 8 of their papers we have counts for
Showing 2024Show all
2 papers · 1 filter
cs.CR2024★ 11 cited
What All the PHUZZ Is About: A Coverage-guided Fuzzer for Finding Vulnerabilities in PHP Web Applications
Sebastian Neef, Lorenz Kleissner, Jean-Pierre Seifert
Coverage-guided fuzz testing has received significant attention from the research community, with a strong focus on binary applications, greatly disregarding other targets, such as…
cs.CR2024
Bringing UFUs Back into the Air With FUEL: A Framework for Evaluating the Effectiveness of Unrestricted File Upload Vulnerability Scanners
Sebastian Neef, Maath Oudeh
Unrestricted file upload (UFU) is a class of web security vulnerabilities that can have a severe impact on web applications if uploaded files are not sufficiently validated or secu…