PortSwigger Research portswigger.net

New crazy payloads in the URL Validation Bypass Cheat Sheet

portswigger.net·81w

Concealing payloads in URL credentials

portswigger.net·82w

Introducing the URL validation bypass cheat sheet

portswigger.net·89w

Gotta cache 'em all: bending the rules of web cache exploitation

portswigger.net·93w

Splitting the email atom: exploiting parsers to bypass access controls (2024)

portswigger.net·68w·Hacker News

Listen to the whispers: web timing attacks that work

portswigger.net·78w·Hacker News

Fickle PDFs: exploiting browser rendering discrepancies

portswigger.net·97w

A hacking hat-trick: previewing three PortSwigger Research publications coming to DEF CON & Black Hat USA

portswigger.net·98w

onwebkitplaybacktargetavailabilitychanged?! New exotic events in the XSS cheat sheet

portswigger.net·101w

Refining your HTTP perspective, with bambdas

portswigger.net·103w

Introducing SignSaboteur: forge signed web tokens with ease

portswigger.net·104w

Making desync attacks easy with TRACE

portswigger.net·113w

Using form hijacking to bypass CSP

portswigger.net·115w

Top 10 web hacking techniques of 2023

portswigger.net·117w

Hiding payloads in Java source code strings

portswigger.net·121w

Top 10 web hacking techniques of 2023 - nominations open

portswigger.net·123w

Finding that one weird endpoint, with Bambdas

portswigger.net·127w

Blind CSS Exfiltration: exfiltrate unknown web pages

portswigger.net·128w

The single-packet attack: making remote race-conditions 'local' (2023)

portswigger.net·72w·Lobsters

How to build custom scanners for web security research automation

portswigger.net·137w

Log in to enable infinite scrolling