Search: portswigger.net | Heykuki News

Heykuki News

Top New Best Ask Show Jobs

Top New Best Ask Show Jobs

1.

Ask HN: Looking for recommendations on decent penetration testing tools

15 points

9 years ago

2.

Ask HN: From Developer to Appsec Engineer?

2 points

4 years ago

3.

Web hacking techniques of 2021 (portswigger.net)

567 points

4 years ago

4.

HTTP/2-exclusive threats caused by implementation flaws and RFC imperfections (portswigger.net)

393 points

5 years ago

5.

Microsoft pushes ahead with controversial ‘buy now, pay later’ feature for Edge (portswigger.net)

336 points

5 years ago

6.

uBlock, I exfiltrate: exploiting ad blockers with CSS (portswigger.net)

270 points

4 years ago

7.

Researchers exploit HTTP/2, WPA3 protocols to stage ‘timeless timing’ attacks (portswigger.net)

241 points

6 years ago

8.

HTTP/3: Everything you need to know about the next-generation web protocol (portswigger.net)

220 points

4 years ago

9.

Targeting HTTP's Hidden Attack-Surface (blog.portswigger.net)

207 points

9 years ago

10.

Web Storage: the lesser evil for session tokens (blog.portswigger.net)

195 points

10 years ago

11.

VPN users unmasked by zero-day vulnerability in Virgin Media routers (portswigger.net)

192 points

5 years ago

12.

Developers fix multitude of vulnerabilities in Apache HTTP Server (portswigger.net)

190 points

5 years ago

13.

Listen to the whispers: web timing attacks that work (portswigger.net)

188 points

2 years ago

14.

Google, Mozilla Close to Finalizing Sanitizer API for Chrome and Firefox Browse (portswigger.net)

187 points

5 years ago

15.

OAuth 2.0 Authentication Vulnerabilities (portswigger.net)

174 points

5 years ago

16.

OPPA: Ohio could become the third US state to enact a new consumer privacy law (portswigger.net)

174 points

5 years ago

17.

New differential fuzzing tool reveals novel HTTP request smuggling techniques (portswigger.net)

169 points

5 years ago

18.

Belgium launches nationwide safe harbor for ethical hackers (portswigger.net)

164 points

3 years ago

19.

Practical Web Cache Poisoning (portswigger.net)

146 points

8 years ago

20.

An overview of the top web hacking techniques of 2017 (portswigger.net)

144 points

8 years ago

21.

Dozens of high-traffic websites vulnerable to ‘account pre-hijacking’, study (portswigger.net)

139 points

4 years ago

22.

Dangerous bug in Chrome’s ‘New Tab’ page bypassed security features (portswigger.net)

136 points

5 years ago

23.

Executing non-alphanumeric JavaScript without parentheses (blog.portswigger.net)

123 points

10 years ago

24.

HAProxy vulnerability enables HTTP request smuggling attacks (portswigger.net)

119 points

5 years ago

25.

Smashing the state machine: the true potential of web race conditions (portswigger.net)

112 points

3 years ago

26.

OAuth Attack Vectors (portswigger.net)

106 points

5 years ago

27.

New and improved Linux Random Number Generator ready for testing (portswigger.net)

100 points

5 years ago

28.

Jitsi’s Emil Ivov on scaling up during a pandemic (portswigger.net)

97 points

6 years ago

29.

WordPress sites getting hacked ‘within seconds’ of TLS certificates being issued (portswigger.net)

91 points

4 years ago

30.

Bittersweet Symfony: Devs accidentally turn off CSRF protection in PHP framework (portswigger.net)

78 points

4 years ago