PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Try it for yourself: the latest PortSwigger Research from Black Hat USA

portswigger.net | blog | #rce | #black-hat | #web-security-academy | #portswigger-research | #timing-attacks | #param-miner | #email-parsing
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

At Black Hat USA, PortSwigger Research debuted practical web timing attack techniques by James Kettle, now in Param Miner, plus email parsing discrepancy research and new training labs.
Published
Collected

Related coverage

research · portswigger.net
Listen to the whispers: web timing attacks that actually work
Timing attacks that actually work: sub-millisecond differences become detectable in seconds, exposing masked misconfigurations, blind injection and hidden routes, backed by tools and case studies.
tool · portswigger.net
Server-Side Prototype Pollution Scanner
PortSwigger's server-side prototype pollution detection techniques are now built into an open source Burp extension, demonstrated by exploiting a Web Security Academy privilege escalation lab.
blog · portswigger.net
Can AI invent new attack techniques? New research from James Kettle and PortSwigger Research
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · portswigger.net
PortSwigger partners with Meta Bug Bounty to empower bug hunters with training and Pro licenses
PortSwigger and Meta Bug Bounty partner to give qualifying hunters Burp Suite Pro licenses and combine Web Security Academy training with Meta's Education Centre for higher-impact findings.
blog · portswigger.net
DOM Invader and the case of direct eval vs indirect eval
Gareth Heyes explains why DOM Invader can trigger eval exceptions: direct eval calls can access local scope variables, while indirect eval via a renamed reference runs in global scope and cannot.
blog · portswigger.net
New learning paths, from the Web Security Academy
The Web Security Academy introduces structured learning paths with progress tracking; the first two cover server-side vulnerabilities at apprentice level and the essentials of SQL injection.
Back