---
id: 5056
title: "Listen to the whispers: web timing attacks that actually work"
source_domain: portswigger.net
source_url: "https://portswigger.net/research/listen-to-the-whispers-web-timing-attacks-that-actually-work"
published_at: "2024-11-18 08:32"
tags: ["black-hat", "research", "tooling", "timing-attacks", "side-channel", "blind-sqli"]
phying_url: "https://phying.com/item/5056"
lang: en
---

# Listen to the whispers: web timing attacks that actually work

## Summary

Timing attacks that actually work: sub-millisecond differences become detectable in seconds, exposing masked misconfigurations, blind injection and hidden routes, backed by tools and case studies.

## Intelligence Metadata

- **Sources:** portswigger.net
- **Published:** 2024-11-18 08:32
- **Original:** https://portswigger.net/research/listen-to-the-whispers-web-timing-attacks-that-actually-work
- **Phying News:** https://phying.com/item/5056