Tessera
Folgen

Soroush Dalili 🍏🍐

@irsdl.bsky.social

Hacker (ethical), web appsec specialist, trainer, tools builder & apps breaker, X: @irsdl https://secproject.com/ https://soroush.me/ https://burpsuite.ninja/

27 Posts1754 Follower245 Folgt
James Kettle@jameskettle.com · 6mo ago

The voting has concluded, and we're thrilled to announce the top ten web hacking techniques of 2025! Massive thanks to everyone in the community for sharing their hard-earned discoveries, plus the panel and everyone who nominated or voted! portswigger.net/research/top...

Top 10 web hacking techniques of 2025

Welcome to the Top 10 Web Hacking Techniques of 2025, the 19th edition of our annual community-powered effort to identify the most innovative must-read web security research published in the last year

portswigger.net

Nicolas Grégoire@agarri.fr · last yr.

If you like hacking XML, this article is a gold mine! 😱 It includes parser discrepancies, round-trip attacks and my favorite, namespace confusion 🤩

Gareth Heyes@garethheyes.co.uk · last yr.

You might have noticed that the recent SAML writeups omit some crucial details. In "SAML roulette: the hacker always wins", we share everything you need to know for a complete unauthenticated exploit on ruby-saml, using GitLab as a case-study. portswigger.net/research/sam...

Soroush Dalili 🍏🍐@irsdl.bsky.social · last yr.

Congrats to all the winners (especially @orange.tw) and all researchers who made the 2024 long list! 🥂 Thanks for sharing your work with us! 🫡 To readers: Don’t just read the top 10—start there and then explore the rest. There are many great works beyond the top 10, so don’t limit yourself! 🦾

PortSwigger Research@portswiggerres.bsky.social · last yr.

The results are in! We're proud to announce the Top 10 Web Hacking Techniques of 2024! portswigger.net/research/top...

tmp0ut@tmpout.sh · 2y ago

We are extending our call for papers to January 1, 2025! We are now targeting an end of January release. If you have any Linux/ELF related research, projects, or papers, we would love to publish them! Huge thank you to everyone who has already submitted! tmpout.sh/blog/vol4-cf...

Bild
terjanq@terjanq.me · 2y ago

Extended the starter with shy writers! 😀 If you're not on the list but write about web security, then feel free to reply with the article you're most proud of, and I will add you to the pack! Make sure to resubscribe to not not miss on the amazing 🌐research! go.bsky.app/9JXnB17

Post nicht verfügbar.
Nicolas Grégoire@agarri.fr · 2y ago

That’s what App Passwords are made for 🔒 Go to "Settings > Advanced > App Passwords" to create one for each 3rd-party app You can login with your handle and this specific password ✅

Rory McCune@mccune.org.uk · 2y ago

As there's more people showing up here who are into Web Application Security and I couldn't find an existing starter pack for it, I decided to create one :) If you do webappsec stuff and want added ping me :) go.bsky.app/NB1hgC

Post nicht verfügbar.