t3_1gtgsg7

Exploring the DOMPurify library: Bypasses and Fixes

t3_1gj9vij

Introducing lightyear: a new way to dump files in PHP

t3_1gbr4ny

Bench Press: Leaking Text Nodes with CSS

t3_1gaam0w

Concealing payloads in URL credentials

t3_1ga3q6r

SQL Injection Polyglots / nastystereo.com

t3_1ga4ubx

SQL Injection Polyglots

t3_1fzaxvh

How to turn a file write vulnerability in a Node.js application into RCE – even though the target's file system is read-only

t3_1g0d3n8

t3_1fumin4

Class Pollution in Ruby: A Deep Dive into Exploiting Recursive Merges

t3_1fv73w0

t3_1ftjbk3

Exploiting trust: Weaponizing permissive CORS configurations

t3_1fsq53m

Iconv, set the charset to RCE (part 3): Blind file read to RCE in PHP

t3_1fqoayc

DNS poisoning in 30M domains caused by the Great Firewall

Splitting the email atom: exploiting parsers to bypass access controls

Gotta cache 'em all: bending the rules of web cache exploitation

Listen to the whispers: web timing attacks that actually work

I Created a Burp Suite Extension from SCRATCH

How to create a Burp Suite Extension from SCRATCH (Python)

A commonly overlooked xss vector

Unveiling TE.0 HTTP Request Smuggling: Discovering a Critical Vulnerability in Thousands of Google Cloud Websites

Encoding Differentials: Why Charset Matters

A Race to the Bottom - Database Transactions Undermining Your AppSec

Time-based ORM leak attacks

Universal Code Execution by Chaining Messages in Browser Extensions

Exploiting Client-Side Path Traversal to Perform CSRF [PDF]

ORM Leak vulnerabilities

Iconv, set the charset to RCE (part 2): Remote code execution on Roundcube (CVE-2024-2961)

Iconv, set the charset to RCE: Exploiting the glibc to hack the PHP engine (part 1)

iframe and window.open magic

Response Filter Denial of Service (RFDoS): shut down a website by triggering WAF rule

Arbitrary JavaScript execution in PDF.js

Exploit Archeology - Exploiting an old unknown Server Side Browser

I like the innovative expansion on RPO as a vuln class, but I'm not sure there is much impact here as an end result. Thoughts?

<div class="md"><p>I like the innovative expansion on RPO as a vuln class, but I&#39;m not sure there is much impact here as an end result. Thoughts?</p>
</div>

RPO -> RPFI

Great blog on CSPT by Mtnber

A community for sharing and discussing novel web security research. 

Every post here is a potential nomination for our annual [Top 10 web hacking techniques](https://portswigger.net/research/top-10-web-hacking-techniques)

Friends with /r/slackers

[Join us on Discord](https://discord.gg/wnERJh8hhK)

# Submission guidelines:
* Submissions should directly relate to web security

* Submissions should contain something innovative or novel.

* Please review the [full submission guidelines](https://www.reddit.com/r/websecurityresearch/about/rules/)

Feel free to report any posts that violate the rules.

<div class="md"><p>A community for sharing and discussing novel web security research. </p>

<p>Every post here is a potential nomination for our annual <a href="https://portswigger.net/research/top-10-web-hacking-techniques">Top 10 web hacking techniques</a></p>

<p>Friends with <a href="/r/slackers">/r/slackers</a></p>

<p><a href="https://discord.gg/wnERJh8hhK">Join us on Discord</a></p>

<h1>Submission guidelines:</h1>

<ul>
<li><p>Submissions should directly relate to web security</p></li>
<li><p>Submissions should contain something innovative or novel.</p></li>
<li><p>Please review the <a href="https://www.reddit.com/r/websecurityresearch/about/rules/">full submission guidelines</a></p></li>
</ul>

<p>Feel free to report any posts that violate the rules.</p>
</div>

<div class="md"><p>A community for sharing and discussing novel web security research. </p>

<p>Join us on Discord: <a href="https://discord.gg/wnERJh8hhK">https://discord.gg/wnERJh8hhK</a></p>
</div>

Web Security Research

Submission guidelines:

8,869 Subscribers

How to create a Burp Suite Extension from SCRATCH (Python)