1.Cookie Chaos: How to bypass __Host and __Secure cookie prefixesresearch | 2025-09-03 14:46 | portswigger.net | Original ↗ | .md | #cookies | #asp-net | #unicode
2.The Campaign Is Not Available in Your Country: XBOW Discovered an SQLi While Attempting to Bypass Geolocation Restrictions.research | 2025-07-31 12:00 | xbow.com | Original ↗ | .md | #bug-bounty | #cloud | #rce
3.Bypassing WAFs with the phantom $Version cookieresearch | 2025-06-30 16:01 | portswigger.net | Original ↗ | .md | #web-security | #cookies | #waf-bypass
4.Stealing HttpOnly cookies with the cookie sandwich techniqueresearch | 2025-06-30 16:01 | portswigger.net | Original ↗ | .md | #cookies | #exfiltration | #session-security
5.How Serialized Cookies Led to RCE on a WordPress Websiteblog | 2024-05-09 16:11 | hackerone.com | Original ↗ | .md | #bug-bounty | #rce | #nextcloud
6.Hardening Your Laravel Applications: Tips for Secure Session and Cookie Managementblog | 2024-03-15 03:06 | hackerone.com | Original ↗ | .md | #php | #web-security | #cookies
7.Web Storage: the lesser evil for session tokensresearch | 2021-02-01 11:33 | portswigger.net | Original ↗ | .md | #web-security | #cookies | #session-tokens
8.Automatic session handlingblog | 2018-08-03 18:04 | portswigger.net | Original ↗ | .md | #burp-suite | #crawler | #session-handling
9.[MoBP] Passive vulnerability scanningvulnerability | 2008-11-19 08:03 | portswigger.net | Original ↗ | .md | #burp-suite | #information-disclosure | #vulnerability-scanning