PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Top 10 web hacking techniques of 2024

portswigger.net | research | #web-security | #community | #research | #top-10 | #web-hacking
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

The 18th Top 10 Web Hacking Techniques countdown: 121 nominations narrowed to a shortlist, ordered by a panel including Nicolas Grégoire, Soroush Dalili and STÖK. One theme dominated the top five.
Published
Collected

Related coverage

research · portswigger.net
Top 10 web hacking techniques of 2025: call for nominations
PortSwigger opens nominations for its Top 10 Web Hacking Techniques of 2025, seeking novel, reusable research. Community votes and an expert panel select the final ten, published February 3.
research · portswigger.net
Top 10 web hacking techniques of 2023
The 17th Top 10 Web Hacking Techniques celebrates 2023: 68 nominations, a community shortlist and panel vote, covering EPP server takeovers, CSRF token fixation and NTLM relay via Akamai and F5.
research · portswigger.net
Top 10 web hacking techniques of 2024: nominations open
Nominations open for the 2024 Top 10 Web Hacking Techniques: novel, reusable research is sought over one-off vulnerabilities; community votes build a 15-entry shortlist for the expert panel.
research · portswigger.net
Top 10 web hacking techniques of 2023 - nominations open
Nominations open for the 2023 Top 10 Web Hacking Techniques, seeking novel and reusable research over one-off bugs; community voting and an expert panel select the final ten entries.
research · portswigger.net
Top 10 web hacking techniques of 2022
The 16th annual Top 10 Web Hacking Techniques list: 46 nominations narrowed by an expert panel to ten standout techniques from 2022, with single sign-on and request smuggling as key themes.
research · portswigger.net
Top 10 Web Hacking Techniques of 2017 - Nominations Open
PortSwigger revives the annual Top 10 web hacking techniques list after a two-year hiatus, opening nominations for 2017 and 2016 with community input and an expert panel.
Back