Research Academy Daily Swig
My account Customers About Blog Careers Legal Contact

PortSwigger Research

Pushing the boundaries of web security

Featured Research

Evading defences using VueJS script gadgets

12 October 2020 Evading defences using VueJS script gadgets

Web Cache Entanglement

05 August 2020 Web Cache Entanglement

HTTP Desync Attacks: Request Smuggling Reborn

07 August 2019 HTTP Desync Attacks: Request Smuggling Reborn

Practical Web Cache Poisoning

Redefining 'unexploitable' 09 August 2018 Practical Web Cache Poisoning Redefining 'unexploitable'

Latest Research Articles

Evading defences using VueJS script gadgets

12 October 2020 Evading defences using VueJS script gadgets

Bypassing DOMPurify again with mutation XSS

07 October 2020 Bypassing DOMPurify again with mutation XSS

Redefining Impossible: XSS without arbitrary JavaScript

23 September 2020 Redefining Impossible: XSS without arbitrary JavaScript

When alert fails: exploiting transient events

11 August 2020 When alert fails: exploiting transient events
Research article

View all articles
Research article

Read article

Meet the Researchers

James Kettle

James Kettle

Director of Research

Gareth Heyes

Gareth Heyes

Researcher

Upcoming Talks

Black Hat Europe Locknote: Conclusions and Key Takeaways

Read more

Portable Data exFiltration: XSS for PDFs

Read more