Research Academy Daily Swig
My account Customers About Blog Careers Legal Contact Resellers
Research hero

PortSwigger Research

Pushing the boundaries of web security

Featured Research

HTTP/2: The Sequel is Always Worse

05 August 2021 HTTP/2: The Sequel is Always Worse

Finding DOM Polyglot XSS in PayPal the Easy Way

30 June 2021 Finding DOM Polyglot XSS in PayPal the Easy Way

Portable Data exFiltration: XSS for PDFs

10 December 2020 Portable Data exFiltration: XSS for PDFs

Evading defences using VueJS script gadgets

12 October 2020 Evading defences using VueJS script gadgets

Latest Research Articles

HTTP/2: The Sequel is Always Worse

05 August 2021 HTTP/2: The Sequel is Always Worse

alert() is dead, long live print()

02 July 2021 alert() is dead, long live print()

Finding DOM Polyglot XSS in PayPal the Easy Way

30 June 2021 Finding DOM Polyglot XSS in PayPal the Easy Way

Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464)

29 June 2021 Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464)
Research article

View all articles
Research article

Read article

Meet the Researchers

James Kettle

James Kettle

Director of Research

Michael Stepankin

Michael Stepankin

Researcher

Gareth Heyes

Gareth Heyes

Researcher