PortSwigger Research

@portswigger_research@robot.villas

PortSwigger's original web-security research, attack techniques, and vulnerability analysis.

Source: https://portswigger.net/research/rss

Homepage: https://portswigger.net/research

Posts

40

Posts

The model isn't cooperating #CyberSecurity #Vulnerability #Research
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406439
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406439
Don't have an account? Find a server at joinmastodon.org
Oct 6, 2026
Smashing the token limit with overlapping fragments #CyberSecurity #Vulnerabilities #WebSecurity
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406447
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406447
Don't have an account? Find a server at joinmastodon.org
Oct 5, 2026
HTTP/3 in Burp Suite - it's time to find a bigger wordlist #CyberSecurity #WebSecurity #Networking
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406456
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406456
Don't have an account? Find a server at joinmastodon.org
Sep 23, 2026
What's in a tag name? JavaScript, apparently #WebSecurity #JavaScript #Vulnerability
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406464
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406464
Don't have an account? Find a server at joinmastodon.org
Aug 25, 2026
CSS:the bomb inside your inbox #WebSecurity #CyberSecurity #Vulnerability
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406473
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406473
Don't have an account? Find a server at joinmastodon.org
Aug 6, 2026
CRLF-Powered Desync Attacks: Beheading HTTP Streams #WebSecurity #CyberSecurity #Vulnerability
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406482
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406482
Don't have an account? Find a server at joinmastodon.org
Aug 5, 2026
Can AI do novel security research? Meet the HTTP Terminator #CyberSecurity #AI #Research
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406490
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406490
Don't have an account? Find a server at joinmastodon.org
Aug 5, 2026
Top 10 web hacking techniques of 2025 #CyberSecurity #Hacking #WebSecurity
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406499
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406499
Don't have an account? Find a server at joinmastodon.org
Feb 5, 2026
Top 10 web hacking techniques of 2025: call for nominations #WebSecurity #Hacking #CyberSecurity
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406510
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406510
Don't have an account? Find a server at joinmastodon.org
Jan 6, 2026
The Fragile Lock: Novel Bypasses For SAML Authentication #CyberSecurity #WebSecurity #SAML
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406520
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406520
Don't have an account? Find a server at joinmastodon.org
Dec 10, 2025
Introducing HTTP Anomaly Rank #WebSecurity #CyberSecurity #Vulnerability
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406529
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406529
Don't have an account? Find a server at joinmastodon.org
Nov 11, 2025
WebSocket Turbo Intruder: Unearthing the WebSocket Goldmine #WebSecurity #CyberSecurity #VulnerabilityAnalysis
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406537
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406537
Don't have an account? Find a server at joinmastodon.org
Sep 17, 2025
Cookie Chaos: How to bypass __Host and __Secure cookie prefixes #Cybersecurity #WebSecurity #Vulnerabilities
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406545
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406545
Don't have an account? Find a server at joinmastodon.org
Sep 3, 2025
Inline Style Exfiltration: leaking data with chained CSS conditionals #CyberSecurity #WebSecurity #Vulnerability
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406554
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406554
Don't have an account? Find a server at joinmastodon.org
Aug 26, 2025
Beware the false false-positive: how to distinguish HTTP pipelining from request smuggling #WebSecurity #CyberSecurity #Networking
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406563
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406563
Don't have an account? Find a server at joinmastodon.org
Aug 19, 2025
HTTP/1.1 must die: the desync endgame #WebSecurity #CyberSecurity #Networking
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406572
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406572
Don't have an account? Find a server at joinmastodon.org
Aug 6, 2025
Repeater Strike: manual testing, amplified #CyberSecurity #WebSecurity #Vulnerability
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406580
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406580
Don't have an account? Find a server at joinmastodon.org
Jul 15, 2025
Drag and Pwnd: Leverage ASCII characters to exploit VS Code #CyberSecurity #Vulnerability #VSCode
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406590
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406590
Don't have an account? Find a server at joinmastodon.org
Apr 30, 2025
Document My Pentest: you hack, the AI writes it up! #CyberSecurity #AI #PenetrationTesting
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406599
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406599
Don't have an account? Find a server at joinmastodon.org
Apr 23, 2025
SAML roulette: the hacker always wins #CyberSecurity #Hacking #Vulnerability
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406608
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406608
Don't have an account? Find a server at joinmastodon.org
Mar 18, 2025
Shadow Repeater:AI-enhanced manual testing #Cybersecurity #WebSecurity #AI
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406619
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406619
Don't have an account? Find a server at joinmastodon.org
Feb 20, 2025
Top 10 web hacking techniques of 2024 #CyberSecurity #Hacking #WebSecurity
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406629
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406629
Don't have an account? Find a server at joinmastodon.org
Feb 4, 2025
Bypassing character blocklists with unicode overflows #WebSecurity #CyberSecurity #Vulnerabilities
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406639
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406639
Don't have an account? Find a server at joinmastodon.org
Jan 28, 2025
Stealing HttpOnly cookies with the cookie sandwich technique #CyberSecurity #WebSecurity #Hacking
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406648
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406648
Don't have an account? Find a server at joinmastodon.org
Jan 22, 2025
Top 10 web hacking techniques of 2024: nominations open #CyberSecurity #Hacking #Vulnerability
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406656
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406656
Don't have an account? Find a server at joinmastodon.org
Jan 8, 2025
Bypassing WAFs with the phantom $Version cookie #WebSecurity #CyberSecurity #WAF
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406664
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406664
Don't have an account? Find a server at joinmastodon.org
Dec 4, 2024
New crazy payloads in the URL Validation Bypass Cheat Sheet #CyberSecurity #WebSecurity #Vulnerabilities
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406672
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406672
Don't have an account? Find a server at joinmastodon.org
Oct 29, 2024
Concealing payloads in URL credentials #Cybersecurity #WebSecurity #Vulnerability
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406682
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406682
Don't have an account? Find a server at joinmastodon.org
Oct 23, 2024
Introducing the URL validation bypass cheat sheet #WebSecurity #CyberSecurity #Vulnerability
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406693
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406693
Don't have an account? Find a server at joinmastodon.org
Sep 3, 2024
Gotta cache 'em all: bending the rules of web cache exploitation #WebSecurity #CyberSecurity #Exploitation
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406701
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406701
Don't have an account? Find a server at joinmastodon.org
Aug 8, 2024
Splitting the email atom: exploiting parsers to bypass access controls #Cybersecurity #WebSecurity #Vulnerability
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406710
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406710
Don't have an account? Find a server at joinmastodon.org
Aug 7, 2024
Listen to the whispers: web timing attacks that actually work #CyberSecurity #WebSecurity #Vulnerability
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406718
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406718
Don't have an account? Find a server at joinmastodon.org
Aug 7, 2024
Fickle PDFs: exploiting browser rendering discrepancies #CyberSecurity #WebSecurity #Vulnerability
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406729
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406729
Don't have an account? Find a server at joinmastodon.org
Jul 9, 2024
A hacking hat-trick: previewing three PortSwigger Research publications coming to DEF CON & Black Hat USA #CyberSecurity #Hacking #Research
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406739
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406739
Don't have an account? Find a server at joinmastodon.org
Jul 2, 2024
onwebkitplaybacktargetavailabilitychanged?! New exotic events in the XSS cheat sheet #WebSecurity #CyberSecurity #XSS
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406753
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406753
Don't have an account? Find a server at joinmastodon.org
Jun 11, 2024
Refining your HTTP perspective, with bambdas #WebSecurity #CyberSecurity #Research
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406761
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406761
Don't have an account? Find a server at joinmastodon.org
May 29, 2024
Introducing SignSaboteur: forge signed web tokens with ease #WebSecurity #CyberSecurity #Vulnerability
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406773
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406773
Don't have an account? Find a server at joinmastodon.org
May 22, 2024
Making desync attacks easy with TRACE #CyberSecurity #WebSecurity #Vulnerability
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406784
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406784
Don't have an account? Find a server at joinmastodon.org
Mar 19, 2024
Using form hijacking to bypass CSP #WebSecurity #CyberSecurity #Vulnerability
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406793
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406793
Don't have an account? Find a server at joinmastodon.org
Mar 5, 2024
Top 10 web hacking techniques of 2023 #CyberSecurity #Hacking #WebSecurity
Boost from your server
Enter the server your account is on. The post opens there so you can boost it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406800
Don't have an account? Find a server at joinmastodon.org
Favorite from your server
Enter the server your account is on. The post opens there so you can favorite it.
Your server
or
Or paste this post's address into your app's search:https://robot.villas/users/portswigger_research/posts/22406800
Don't have an account? Find a server at joinmastodon.org
Feb 19, 2024