1.What's in a tag name? JavaScript, apparentlyresearch | 2026-08-25 14:24 | portswigger.net | Original ↗ | .md | #browser-security | #web-security | #xss
2.How to hack into NFT marketplaceblog | 2026-06-11 10:27 | hackenproof.com | Original ↗ | .md | #bug-bounty | #web3 | #web-security
3.$170k in Bypasses: The Vercel React2Shell Challengeblog | 2026-05-04 00:00 | hacktron.ai | Original ↗ | .md | #bug-bounty | #react2shell | #nextjs
4.In WAF we (should not) trustresearch | 2026-03-25 23:00 | blog.quarkslab.com | Original ↗ | .md | #appsec | #web-security | #command-obfuscation
5.Bypassing WAFs with the phantom $Version cookieresearch | 2025-06-30 16:01 | portswigger.net | Original ↗ | .md | #web-security | #cookies | #waf-bypass
6.The art of payload obfuscation: how to mask malicious scripts and bypass defence mechanismsblog | 2025-03-27 14:42 | yeswehack.com | Original ↗ | .md | #bug-bounty | #encoding | #payload-obfuscation
7.‘Hunters’ biggest mistake? Expecting immediate results’: ‘RL’ on building a Bug Bounty careerblog | 2024-03-22 08:46 | yeswehack.com | Original ↗ | .md | #bug-bounty | #interview | #career
8.Source Code Disclosure in ASP.NET appsresearch | 2024-03-07 12:41 | swarm.ptsecurity.com | Original ↗ | .md | #waf-bypass | #aspnet | #iis
9.Bypassing WAFs and cracking XOR with Hackvertorresearch | 2023-10-02 14:38 | portswigger.net | Original ↗ | .md | #burp-suite | #portswigger | #tooling
10.When security features collideresearch | 2023-10-02 14:37 | portswigger.net | Original ↗ | .md | #web-security | #xss | #defense
11.An Interesting XSS-Bypassing WAFvulnerability | 2023-07-26 10:04 | labs.cognisys.group | Original ↗ | .md | #pentesting | #web-security | #xss
12.Bypassing Web Cache Poisoning Countermeasuresresearch | 2022-09-29 07:36 | portswigger.net | Original ↗ | .md | #web-security | #cloudflare | #portswigger
13.Jetty Features for Hacking Web Appsresearch | 2022-09-15 14:14 | swarm.ptsecurity.com | Original ↗ | .md | #rce | #java | #waf-bypass
14.Evading defences using VueJS script gadgetsresearch | 2022-09-07 09:05 | portswigger.net | Original ↗ | .md | #xss | #waf-bypass | #csp-bypass
15.DOJO CHALLENGE #17 Winners!blog | 2022-06-13 14:44 | yeswehack.com | Original ↗ | .md | #bug-bounty | #dojo | #javascript
16.DOJO CHALLENGE #15 Winners!blog | 2022-02-28 15:55 | yeswehack.com | Original ↗ | .md | #bug-bounty | #web-security | #dojo
17.DOJO CHALLENGE #18 Winners!blog | 2022-02-11 15:04 | yeswehack.com | Original ↗ | .md | #bug-bounty | #web-security | #dojo
18.Zero-Day Collaboration: Working With Imperva to Eliminate a Critical Exposurevulnerability | 2022-01-11 00:00 | bishopfox.com | Original ↗ | .md | #cloud | #zero-day | #vulnerability
19.DOJO CHALLENGE #7 Winners!vulnerability | 2021-03-12 10:44 | yeswehack.com | Original ↗ | .md | #ctf | #xss | #prototype-pollution
20.How to Regex: A Practical Guide to Regular Expressions (Regex) for Hackersblog | 2021-03-12 00:00 | bugcrowd.com | Original ↗ | .md | #bug-bounty | #automation | #tutorial
21.Top 10 Web Hacking Techniques of 2017research | 2021-01-05 14:10 | portswigger.net | Original ↗ | .md | #cloud | #web-security | #research
22.When alert fails: exploiting transient eventsresearch | 2020-09-08 12:27 | portswigger.net | Original ↗ | .md | #web-security | #xss | #waf-bypass
23.SVG animate XSS vectorresearch | 2020-09-08 12:22 | portswigger.net | Original ↗ | .md | #browser-security | #web-security | #xss
24.JavaScript without parentheses using DOMMatrixresearch | 2020-09-08 10:00 | portswigger.net | Original ↗ | .md | #xss | #portswigger | #javascript
25.One XSS cheatsheet to rule them allresearch | 2020-09-04 14:33 | portswigger.net | Original ↗ | .md | #browser-security | #xss | #portswigger
26.XSS without parentheses and semi-colonsresearch | 2020-03-20 07:50 | portswigger.net | Original ↗ | .md | #xss | #portswigger | #javascript