PortSwigger Research portswigger.net
Smashing the state machine: the true potential of web race conditions
portswigger.net·145w
Exploiting XSS in hidden inputs and meta tags
portswigger.net·149w
How I choose a security research topic
portswigger.net·153w
Bypassing CSP via DOM clobbering
portswigger.net·154w
Ambushed by AngularJS: a hidden CSP bypass in Piwik PRO
portswigger.net·160w
The curl quirk that exposed Burp Suite & Google Chrome
portswigger.net·164w
Exploiting prototype pollution in Node without the filesystem
portswigger.net·165w
Server-side prototype pollution: Black-box detection without the DoS
portswigger.net·170w
Top 10 web hacking techniques of 2022
portswigger.net·171w
Top 10 web hacking techniques of 2022 - nominations open
portswigger.net·176w
Hijacking service workers via DOM Clobbering
portswigger.net·181w

Keyboard Shortcuts

Navigation

Next / previous item
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Browse
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help