Curated security research, vulnerabilities, advisories and tools for practitioners.

research coverage

Curated research security coverage. (Page 14)

391.

HTB CBBH Review - A Penetration Tester's Perspective

research | 2025-09-12 05:55 | projectblack.io | Original ↗ | .md | #pentesting | #certification | #web-security

392.

Bypassing Windows Login Without Password

research | 2025-09-12 05:55 | projectblack.io | Original ↗ | .md | #pentesting | #privilege-escalation | #windows

393.

Who Scans the Scanner? Exploiting Trend Micro Mobile Security

research | 2025-09-10 19:56 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #xss | #research

394.

Cookie Chaos: How to bypass __Host and __Secure cookie prefixes

research | 2025-09-03 14:46 | portswigger.net | Original ↗ | .md | #cookies | #asp-net | #unicode

395.

Server-Side Template Injection

research | 2025-09-03 07:38 | portswigger.net | Original ↗ | .md | #rce | #web-security | #template-injection

396.

Cracking the lens: targeting HTTP's hidden attack-surface

research | 2025-09-03 07:38 | portswigger.net | Original ↗ | .md | #bug-bounty | #attack-surface | #portswigger

397.

A hacking hat-trick: previewing three PortSwigger Research publications coming to DEF CON & Black Hat USA

research | 2025-09-03 07:38 | portswigger.net | Original ↗ | .md | #black-hat | #conference | #research

398.

Practical Web Cache Poisoning

research | 2025-09-03 07:37 | portswigger.net | Original ↗ | .md | #burp-suite | #web-security | #portswigger

399.

HTTP Desync Attacks: Request Smuggling Reborn

research | 2025-09-03 07:37 | portswigger.net | Original ↗ | .md | #bug-bounty | #black-hat | #web-security

400.

Web Cache Entanglement: Novel Pathways to Poisoning

research | 2025-09-03 07:37 | portswigger.net | Original ↗ | .md | #black-hat | #web-security | #cdn

401.

HTTP/2: The Sequel is Always Worse

research | 2025-09-03 07:37 | portswigger.net | Original ↗ | .md | #black-hat | #web-security | #request-smuggling

402.

Browser-Powered Desync Attacks: A New Frontier in HTTP Request Smuggling

research | 2025-09-03 07:36 | portswigger.net | Original ↗ | .md | #black-hat | #web-security | #request-smuggling

403.

Secondary Context Path Traversal in Omnissa Workspace ONE UEM

research | 2025-08-30 00:00 | slcyber.io | Original ↗ | .md | #vulnerability-research

404.

"The entire internet is broken": ethical hacking expert John Hammond meets James Kettle

research | 2025-08-27 09:11 | portswigger.net | Original ↗ | .md | #http-desync | #request-smuggling | #james-kettle

405.

Inline Style Exfiltration: leaking data with chained CSS conditionals

research | 2025-08-27 07:35 | portswigger.net | Original ↗ | .md | #chromium | #exfiltration | #css

406.

Analyzing and countering Windows anti-VM techniques

research | 2025-08-29 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #software-security | #emulation

407.

HackerOne Partners with IBM to Advance AI Protections for Granite Models

research | 2025-08-27 13:59 | hackerone.com | Original ↗ | .md | #ai-security | #bug-bounty | #cloud

408.

8 Malicious npm Packages Deliver Multi-Layered Chrome Browser Information Stealer

research | 2025-08-27 15:26 | jfrog.com | Original ↗ | .md | #supply-chain | #npm | #obfuscation

409.

Beware the false false-positive: how to distinguish HTTP pipelining from request smuggling

research | 2025-08-19 14:31 | portswigger.net | Original ↗ | .md | #burp-suite | #request-smuggling | #false-positives

410.

Marshal madness: A brief history of Ruby deserialization exploits

research | 2025-08-19 11:00 | blog.trailofbits.com | Original ↗ | .md | #ruby | #deserialization | #vulnerabilities

411.

A Fuzzy Escape - A tale of vulnerability research on hypervisors

research | 2025-08-18 00:00 | bughunters.google.com | Original ↗ | .md | #vulnerability-research | #fuzzing | #exploitation

412.

Vulnerability Discovery with LLM-Powered Patch Diffing

research | 2025-08-15 00:00 | bishopfox.com | Original ↗ | .md | #ai-security | #vulnerability-research | #automation

413.

Inside Grammarly’s AI-driven automation with the MCP Server for Wiz

research | 2025-08-14 15:46 | wiz.io | Original ↗ | .md | #ai-security | #mcp | #case-study

414.

EntraGoat Scenario 6: Exploiting Certificate-Based Authentication to Impersonate Global Admin in Entra ID

research | 2025-08-12 21:34 | semperis.com | Original ↗ | .md | #account-takeover | #privilege-escalation | #entra-id

415.

Setting up Windows 11 in esReverse for emulation

research | 2025-08-12 00:00 | eshard.com | Original ↗ | .md | #vulnerability-research | #reverse-engineering | #software-security

416.

Go Get ‘Em: Updates to Volexity Golang Tooling

research | 2025-08-11 18:41 | volexity.com | Original ↗ | .md | #vulnerability-research | #open-source | #threat-intelligence

417.

Building Effective LLM Agents | AI Cyber Challenge

research | 2025-08-08 19:28 | theori.io | Original ↗ | .md | #ai-security | #patching | #vulnerability-detection

418.

AI Cyber Challenge and Theori's RoboDuck

research | 2025-08-08 19:27 | theori.io | Original ↗ | .md | #ai-security | #open-source | #llm

419.

Inside the brain of a hacking robot: Exploring traces | AI Cyber Challenge

research | 2025-08-08 19:25 | theori.io | Original ↗ | .md | #ai-security | #vulnerability-discovery | #aixcc

420.

Salesforce Penetration Testing Fundamentals

research | 2025-08-07 03:56 | projectblack.io | Original ↗ | .md | #access-control | #penetration-testing | #salesforce

← Previous More →