Offensive AI: Enhancing Directory Brute-forcing Attack with the Use of Language Models
Year: 2024
Type: conference-paper
Abstract: Web Vulnerability Assessment and Penetration Testing (Web VAPT) is a comprehensive cybersecurity process that uncovers a range of vulnerabilities which, if exploited, could compromise the integrity of web applications. In a VAPT, it is common to perform a Directory brute-forcing Attack, aiming at the identification of accessible directories of a target website. Current commercial solutions are inefficient as they are based on brute-forcing strategies that use wordlists, resulting in enormous quantities of trials for a small amount of success.
Authors: Alberto Castagnaro, Mauro Conti, Luca Pajola
Institutions: Delft University of Technology, University of Padua
Language: English
Subfield: Information Systems
Field: Computer Science
Domain: Physical Sciences
Open Access status: gold
Funder: Universitas Brawijaya
Award: G1564566602
OpenAlex ID: W4404611994