The majority of Ethical Hacking (EH) tools utilised in penetration testing are developed by
practitioners within the industry or underground communities. Similarly, academic …

A miniapp is a full-fledged app that is executed inside a mobile super app such as WeChat
or SnapChat. Being mini by nature, it often has to communicate with other miniapps to …

Modern web applications are an integral part of our digital lives. As we put more trust in web
applications, the need for security increases. At the same time, detecting vulnerabilities in …

Client-side CSRF is a new type of CSRF vulnerability where the adversary can trick the
client-side JavaScript program to send a forged HTTP request to a vulnerable target site by …

Request forgery attacks are among the oldest threats to Web applications, traditionally
caused by server-side confused deputy vulnerabilities. However, recent advancements in …

Web vulnerability scanners (WVSs) are tools that can detect security vulnerabilities in web
services. Although both commercial and open‐source WVSs exist, their vulnerability …

Chromium-based browsers now restrict cookies' scope to a same-site context by changing
the default policy for cookies, thus requiring developers to adapt their websites. The extent of …

Software as a Service (SaaS) e-commerce platforms for merchants allow individual business
owners to set up their online stores almost instantly. Prior work has shown that the checkout …

ÐBlack-box web vulnerability scanners are invaluable for security researchers and
practitioners. Despite recent approaches tackling some of the inherent limitations of …

Cross-Site Request Forgery (CSRF) is among the oldest web vulnerabilities that, despite its
popularity and severity, it is still an understudied security problem. In this paper, we …