Research Academy Daily Swig
My account Customers About Blog Careers Legal Contact Resellers
Research hero

PortSwigger Research

Pushing the boundaries of web security

Featured Research

Finding DOM Polyglot XSS in PayPal the Easy Way

30 June 2021 Finding DOM Polyglot XSS in PayPal the Easy Way

Portable Data exFiltration: XSS for PDFs

10 December 2020 Portable Data exFiltration: XSS for PDFs

Evading defences using VueJS script gadgets

12 October 2020 Evading defences using VueJS script gadgets

Web Cache Entanglement

05 August 2020 Web Cache Entanglement

Latest Research Articles

alert() is dead, long live print()

02 July 2021 alert() is dead, long live print()

Finding DOM Polyglot XSS in PayPal the Easy Way

30 June 2021 Finding DOM Polyglot XSS in PayPal the Easy Way

Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464)

29 June 2021 Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464)

nOtWASP bottom 10: vulnerabilities that make you cry

01 April 2021 nOtWASP bottom 10: vulnerabilities that make you cry
Research article

View all articles
Research article

Read article

Meet the Researchers

James Kettle

James Kettle

Director of Research

Michael Stepankin

Michael Stepankin

Researcher

Gareth Heyes

Gareth Heyes

Researcher

Upcoming Talks

HTTP/2: The Sequel is Always Worse

Read more