Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Notepad++ hijack, pwning Claude Code, top web hacking techniques of 2025 – ethical hacker news roundup

yeswehack.com | blog | #rce | #web3 | #claude-code | #web-security | #n8n | #portswigger | #ssti | #roundup

Summary

Roundup: PortSwigger's top 10 web hacking techniques of 2025 (won by error-based SSTI research), a six-bug pre-auth RCE chain in a SIEM/SOAR appliance, and notable writeups.
Published
Collected

original ↗

Related coverage

  1. Turning Email Template Injection into Remote Code Execution (labs.cognisys.group)
  2. Can AI invent new attack techniques? New research from James Kettle and PortSwigger Research (portswigger.net)
  3. What's in a tag name? JavaScript, apparently (portswigger.net)
  4. Dojo challenge #53 Hacker Club solution (yeswehack.com)
  5. Write triager-grade Bug Bounty reports with Claude Code: introducing the YesWeHack Claude Kit plugin (yeswehack.com)
  6. Rickrolling the World Cup, unleashing AI across Google, 0-click stored XSS on Next.js – ethical hacker roundup (yeswehack.com)

back