1.In WAF we (should not) trustresearch | 2026-03-25 23:00 | blog.quarkslab.com | Original ↗ | .md | #appsec | #web-security | #command-obfuscation
2.HTTP/1.1 Must Die: Conquering the 0.CL Challengeblog | 2026-03-13 09:21 | portswigger.net | Original ↗ | .md | #appsec | #burp-suite | #web-security
3.CORS Security: Beyond Basic Configurationblog | 2025-11-21 00:00 | aikido.dev | Original ↗ | .md | #appsec | #browser-security | #web-security
4.Introducing HTTP Anomaly Rankresearch | 2025-11-11 14:41 | portswigger.net | Original ↗ | .md | #ai-security | #burp-suite | #web-security
5.Cracking the lens: targeting HTTP's hidden attack-surfaceresearch | 2025-09-03 07:38 | portswigger.net | Original ↗ | .md | #bug-bounty | #attack-surface | #portswigger
6.Beware the false false-positive: how to distinguish HTTP pipelining from request smugglingresearch | 2025-08-19 14:31 | portswigger.net | Original ↗ | .md | #burp-suite | #request-smuggling | #false-positives
7.The ultimate beginner’s guide to Burp Suiteblog | 2024-11-20 13:00 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #burp-suite | #web-security
8.Web timing attacks, Apache HTTP confusion attacks, email parsing discrepancies – ethical hacker news roundupresearch | 2024-09-30 15:25 | yeswehack.com | Original ↗ | .md | #rce | #web-security | #apache
9.Making desync attacks easy with TRACEresearch | 2024-06-19 13:58 | portswigger.net | Original ↗ | .md | #bug-bounty | #request-smuggling | #exploitation
10.Refining your HTTP perspective, with bambdasresearch | 2024-05-29 15:03 | portswigger.net | Original ↗ | .md | #burp-suite | #graphql | #tooling
11.Understanding HTTP and the Critical Shift to HTTPSblog | 2024-03-28 01:58 | hackerone.com | Original ↗ | .md | #web-security | #networking | #tls
12.Why REST Supplanted SOAP for Cross-Application Communicationblog | 2024-03-11 03:19 | hackerone.com | Original ↗ | .md | #http | #soap | #json
13.Finding that one weird endpoint, with Bambdasresearch | 2023-12-12 14:11 | portswigger.net | Original ↗ | .md | #burp-suite | #information-disclosure | #bambdas
14.Twisted Version 19.10.0blog | 2020-03-11 00:00 | bishopfox.com | Original ↗ | .md | #request-smuggling | #python | #advisory