BACScan: Automatic Black-Box Detection of Broken-Access-Control Vulnerabilities in Web Applications. - Fengyu Liu; Yuan Zhang 009; Enhao Li; Wei Meng 001; Youkun Shi; Qianheng Wang; Chenlin Wang; Zihan Lin; Min Yang 002 (CCS, 2025)