Refploit repairs code-agent trajectories for Java exploit reproduction via differential validation and focused recovery constraints, achieving 80.2% success on 172 references with 64.3% relative improvement.
Faultline: Automated proof-of-vulnerability generation using llm agents,
8 Pith papers cite this work. Polarity classification is still indexing.
citation-role summary
citation-polarity summary
years
2026 8roles
background 1polarities
background 1representative citing papers
Exploratory interview study with 17 developers identifies four forms of emergent oversight work for software agents and documents situated challenges and heuristics.
On 183 validated V8/SpiderMonkey vulnerabilities, the best coding agents verify at most 38.8% of instances, and crash-only grading would inflate judged successes by 43.6%.
An LLM agent with decompiler, COM-inspection, and debugger tools finds race-condition vulnerabilities in Windows COM binaries and generates verified proof-of-concept crashes.
AnyPoC validates LLM bug reports by synthesizing, executing, and independently re-checking proof-of-concept tests, finding 121 new bugs with 108 confirmed across large systems.
PAGENT integrates static and dynamic program analysis guidance with an LLM agent to improve automated proof-of-concept generation success by 132% over prior agentic methods.
V2E automates PoC generation, triggerability and profitability validation, and iterative refinement using LLMs to confirm exploitable smart contract vulnerabilities, outperforming baselines on 264 labeled contracts.
Vulnsage, a multi-agent framework, generates 34.64% more exploits than prior tools and verified 146 zero-day vulnerabilities in real-world open-source libraries.
citing papers explorer
-
Refploit: Facilitating Exploit Construction via Code-Agent Trajectory Repair
Refploit repairs code-agent trajectories for Java exploit reproduction via differential validation and focused recovery constraints, achieving 80.2% success on 172 references with 64.3% relative improvement.
-
Human oversight of agentic systems in practice: Examining the oversight work, challenges, and heuristics of developers using software agents
Exploratory interview study with 17 developers identifies four forms of emergent oversight work for software agents and documents situated challenges and heuristics.
-
SEC-bench Pro: Can Language Models Solve Long-Horizon Software Security Tasks?
On 183 validated V8/SpiderMonkey vulnerabilities, the best coding agents verify at most 38.8% of instances, and crash-only grading would inflate judged successes by 43.6%.
-
Agentic Vulnerability Reasoning on COTS Binaries
An LLM agent with decompiler, COM-inspection, and debugger tools finds race-condition vulnerabilities in Windows COM binaries and generates verified proof-of-concept crashes.
-
AnyPoC: Universal Proof-of-Concept Test Generation for Scalable LLM-Based Bug Detection
AnyPoC validates LLM bug reports by synthesizing, executing, and independently re-checking proof-of-concept tests, finding 121 new bugs with 108 confirmed across large systems.
-
Program Analysis Guided LLM Agent for Proof-of-Concept Generation
PAGENT integrates static and dynamic program analysis guidance with an LLM agent to improve automated proof-of-concept generation success by 132% over prior agentic methods.
-
V2E: Validating Smart Contract Vulnerabilities through Profit-driven Exploit Generation and Execution
V2E automates PoC generation, triggerability and profitability validation, and iterative refinement using LLMs to confirm exploitable smart contract vulnerabilities, outperforming baselines on 264 labeled contracts.
-
A Multi-Agent Framework for Automated Exploit Generation with Constraint-Guided Comprehension and Reflection
Vulnsage, a multi-agent framework, generates 34.64% more exploits than prior tools and verified 146 zero-day vulnerabilities in real-world open-source libraries.