ABSENTIA: Detecting Broken Access Control Vulnerabilities in Web Applications
ABSENTIA is a security scaffolding that uses general LLM agents to systematically analyze web application source code route by route using invariant falsification. It detects 19 out of 30 broken access control vulnerabilities, outperforming dedicated tools like CodeQL and Semgrep. This demonstrates that a systematic procedure can recover application-specific authorization properties that traditional static analysis misses.