Skip to content
@WSP-LAB

KAIST Web Security and Privacy Lab

We conduct research on various topics in Web security and privacy

Popular repositories Loading

  1. FUSE FUSE Public

    A penetration testing tool for finding file upload bugs (NDSS 2020)

    Python 255 45

  2. FUGIO FUGIO Public

    FUGIO: Automatic Exploit Generation for PHP Object Injection Vulnerabilities

    PHP 99 18

  3. Montage Montage Public

    Montage: A Neural Network Language Model-Guided JavaScript Engine Fuzzer

    Python 90 16

  4. HiddenCPG HiddenCPG Public

    HiddenCPG: Large-Scale Vulnerable Clone Detection Using Subgraph Isomorphism of Code Property Graphs

    Python 44 7

  5. Link Link Public

    Link: Black-Box Detection of Cross-Site Scripting Vulnerabilities Using Reinforcement Learning

    Python 25 4

  6. js-test-suite js-test-suite Public

    A collection of JavaScript test suites from JavaScript engine & Test262 repositories.

    JavaScript 22 5

Repositories

Showing 10 of 22 repositories
  • wsp-lab.github.io Public
    WSP-LAB/wsp-lab.github.io's past year of commit activity
    SCSS 1 MIT 1 1 0 Updated Aug 31, 2026
  • Site-Isolation-is-Dead Public

    Site Isolation is Dead: How Site Isolation is Broken in Agentic Browsers and Extensions (IEEE S&P 2026)

    WSP-LAB/Site-Isolation-is-Dead's past year of commit activity
    6 AGPL-3.0 0 0 0 Updated Aug 30, 2026
  • LLMs-Killed-QnA-Stars Public

    LLMs Killed Q&A Stars? Analyzing the Impact of LLM-Generated Answers on an Online Q&A Platform

    WSP-LAB/LLMs-Killed-QnA-Stars's past year of commit activity
    Python 1 MIT 0 0 0 Updated Apr 17, 2026
  • Zelda Public
    WSP-LAB/Zelda's past year of commit activity
    Python 2 0 0 0 Updated Jan 22, 2026
  • YOPO Public

    You Only Perturb Once: Bypassing (Robust) Ad-Blockers Using Universal Adversarial Perturbations

    WSP-LAB/YOPO's past year of commit activity
    Python 6 MIT 1 0 0 Updated Dec 11, 2025
  • TrustyMon Public

    TrustyMon: Practical Detection of DOM-based Cross-Site Scripting Attacks Using Trusted Types

    WSP-LAB/TrustyMon's past year of commit activity
    JavaScript 0 0 0 0 Updated Sep 2, 2025
  • PrivateInvestigator Public

    Private Investigator: Extracting Personally Identifiable Information from Large Language Models Using Optimized Prompts

    WSP-LAB/PrivateInvestigator's past year of commit activity
    Python 11 MIT 0 0 0 Updated Aug 5, 2025
  • Montage Public

    Montage: A Neural Network Language Model-Guided JavaScript Engine Fuzzer

    WSP-LAB/Montage's past year of commit activity
    Python 90 MIT 16 0 1 Updated May 3, 2024
  • AdCPG Public
    WSP-LAB/AdCPG's past year of commit activity
    Python 4 0 0 0 Updated Jan 15, 2024
  • FUGIO Public

    FUGIO: Automatic Exploit Generation for PHP Object Injection Vulnerabilities

    WSP-LAB/FUGIO's past year of commit activity
    PHP 99 18 0 1 Updated Nov 27, 2023
View all repositories

Most used topics

Loading…