Products Solutions Research Academy Daily Swig

PortSwigger Research

Pushing the boundaries of web security

Featured Research

Web Cache Entanglement

05 August 2020 Web Cache Entanglement

HTTP Desync Attacks: Request Smuggling Reborn

07 August 2019 HTTP Desync Attacks: Request Smuggling Reborn

Practical Web Cache Poisoning

Redefining 'unexploitable' 09 August 2018 Practical Web Cache Poisoning Redefining 'unexploitable'

JSON hijacking for the modern web

25 November 2016 JSON hijacking for the modern web

Latest Research Articles

When alert fails: exploiting transient events

11 August 2020 When alert fails: exploiting transient events

Web Cache Entanglement

05 August 2020 Web Cache Entanglement

Attacking and defending JavaScript sandboxes

15 July 2020 Attacking and defending JavaScript sandboxes

Escaping JavaScript sandboxes with parsing issues

10 July 2020 Escaping JavaScript sandboxes with parsing issues
Research article

View all articles
Research article

Read article

Meet the Researchers

James Kettle

James Kettle

Director of Research

Gareth Heyes

Gareth Heyes

Researcher