TY - RPRT TI - Decoupling Reconnaissance and Exploitation: Measuring the Capability Boundaries of LLM-Based Web Penetration Testing AU - Liwei Yu AU - Shuo Li AU - Ming Zhou AU - Ge Chu AU - Yan Guo PY - 2026 UR - https://arxiv.org/abs/2606.25332 ID - 2606.25332 ER -