PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

How I choose a security research topic

portswigger.net | research | #web-security | #security-research | #methodology | #career-advice | #research-topics
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

James Kettle on choosing security research topics: evaluate how quickly you can fail, chase what scares you, and know when to push on, using his race-conditions research as a case study.
Published
Collected

Related coverage

research · portswigger.net
Hunting evasive vulnerabilities
James Kettle's Nullcon keynote explores evasive vulnerabilities from a decade of research — too advanced, too silly or well-masked to spot — extracting principles for finding overlooked flaws.
research · portswigger.net
How to turn security research into profit: a CL.0 case study
Strategies for turning security research into bounty profit, using the CL.0 desync class as a case study: assess competition, find gaps in released scanners, and act before a technique saturates.
research · swarm.ptsecurity.com
Kerberoasting without SPNs
How to Kerberoast without knowing any SPNs: by requesting service tickets for fabricated SPN strings that still map to target accounts, attackers can obtain tickets encrypted with the account key and crack them offline — useful when SPN enumeration is noisy or unavailable.
research · hackenproof.com
How to Read Any Smart Contract Project Without Getting Lost
A methodology guide on reading unfamiliar smart contract projects without getting lost, aimed at security researchers and auditors facing large, complex codebases.
research · vercel.com
DeepsecBench: evaluating model performance in finding cybersecurity vulnerabilities
Today we're releasing DeepsecBench, a benchmark that evaluates how well different models find security vulnerabilities in application code.
research · vercel.com
Security boundaries in agentic architectures
A framework for drawing security boundaries in agentic architectures. Most agents run with zero isolation between the agent and the code it generates. Learn where to draw the boundaries, from secret injection to full application sandboxing.
Back