SpiderSapien: A Client-Centric Web Crawler and Security Scanner

SpiderSapien is a client-centric web crawler and security scanner that reaches deep into the black-box states of modern dynamic web applications through immersive interaction. It combines interactive element detection, UI action ordering, and LLM form solving; in evaluation, its average code coverage is at least 46% higher than any other scanner and 16% higher than the union of all other scanners. It found XSS in 7 web applications, whereas other scanners found it in at most 2 applications.