t3_1hay1pl

The Ruby on Rails _json Juggling Attack

t3_1h83rqx

Remote Code Execution with Spring Boot 3.4.0 Properties

t3_1h6ij1e

Bypassing WAFs with the phantom $Version cookie

t3_1h67fge

XS-Leaks through Speculation Rules

t3_1h6d6o4

t3_1h6bq1b

Gem::SafeMarshal escape

t3_1h148jb

Cross-Site POST Requests Without a Content-Type Header

t3_1h0zbez

Turning an XML file write into RCE in Spring

t3_1gzdaly

Ruby 3.4 Universal RCE Deserialization Gadget Chain

t3_1gtgsg7

Exploring the DOMPurify library: Bypasses and Fixes

t3_1gj9vij

Introducing lightyear: a new way to dump files in PHP

Bench Press: Leaking Text Nodes with CSS

Concealing payloads in URL credentials

SQL Injection Polyglots

How to turn a file write vulnerability in a Node.js application into RCE – even though the target's file system is read-only

Class Pollution in Ruby: A Deep Dive into Exploiting Recursive Merges

Exploiting trust: Weaponizing permissive CORS configurations

Iconv, set the charset to RCE (part 3): Blind file read to RCE in PHP

DNS poisoning in 30M domains caused by the Great Firewall

Splitting the email atom: exploiting parsers to bypass access controls

Gotta cache 'em all: bending the rules of web cache exploitation

Listen to the whispers: web timing attacks that actually work

I Created a Burp Suite Extension from SCRATCH

How to create a Burp Suite Extension from SCRATCH (Python)

A commonly overlooked xss vector

Unveiling TE.0 HTTP Request Smuggling: Discovering a Critical Vulnerability in Thousands of Google Cloud Websites

Encoding Differentials: Why Charset Matters

A Race to the Bottom - Database Transactions Undermining Your AppSec

Time-based ORM leak attacks

Universal Code Execution by Chaining Messages in Browser Extensions

Exploiting Client-Side Path Traversal to Perform CSRF [PDF]

ORM Leak vulnerabilities

A community for sharing and discussing novel web security research. 

Every post here is a potential nomination for our annual [Top 10 web hacking techniques](https://portswigger.net/research/top-10-web-hacking-techniques)

Friends with /r/slackers

[Join us on Discord](https://discord.gg/wnERJh8hhK)

# Submission guidelines:
* Submissions should directly relate to web security

* Submissions should contain something innovative or novel.

* Please review the [full submission guidelines](https://www.reddit.com/r/websecurityresearch/about/rules/)

Feel free to report any posts that violate the rules.

<div class="md"><p>A community for sharing and discussing novel web security research. </p>

<p>Every post here is a potential nomination for our annual <a href="https://portswigger.net/research/top-10-web-hacking-techniques">Top 10 web hacking techniques</a></p>

<p>Friends with <a href="/r/slackers">/r/slackers</a></p>

<p><a href="https://discord.gg/wnERJh8hhK">Join us on Discord</a></p>

<h1>Submission guidelines:</h1>

<ul>
<li><p>Submissions should directly relate to web security</p></li>
<li><p>Submissions should contain something innovative or novel.</p></li>
<li><p>Please review the <a href="https://www.reddit.com/r/websecurityresearch/about/rules/">full submission guidelines</a></p></li>
</ul>

<p>Feel free to report any posts that violate the rules.</p>
</div>

<div class="md"><p>A community for sharing and discussing novel web security research. </p>

<p>Join us on Discord: <a href="https://discord.gg/wnERJh8hhK">https://discord.gg/wnERJh8hhK</a></p>
</div>

Web Security Research

Submission guidelines:

8,949 Subscribers

How to create a Burp Suite Extension from SCRATCH (Python)