image Get the whitepaper, toolkits & remediation guides → http1mustdie.com
Research Academy
My account Customers About Blog Careers Legal Contact Resellers
Research hero

PortSwigger Research

Pushing the boundaries of web security

Featured Research

Introducing the URL validation bypass cheat sheet

03 September 2024 Introducing the URL validation bypass cheat sheet

Gotta cache 'em all: bending the rules of web cache exploitation

08 August 2024 Gotta cache 'em all: bending the rules of web cache exploitation

Splitting the email atom: exploiting parsers to bypass access controls

07 August 2024 Splitting the email atom: exploiting parsers to bypass access controls

Listen to the whispers: web timing attacks that actually work

07 August 2024 Listen to the whispers: web timing attacks that actually work

Latest Research Articles

06 August 2025

Repeater Strike: manual testing, amplified

15 July 2025 Repeater Strike: manual testing, amplified

Drag and Pwnd: Leverage ASCII characters to exploit VS Code

30 April 2025 Drag and Pwnd: Leverage ASCII characters to exploit VS Code

Document My Pentest: you hack, the AI writes it up!

23 April 2025 Document My Pentest: you hack, the AI writes it up!
Research article

View all articles
Research article

Read article

Meet the Researchers

James Kettle

James Kettle

Director of Research

Gareth Heyes

Gareth Heyes

Researcher

Martin Doyhenard

Martin Doyhenard

Researcher

Zakhar Fedotkin

Zakhar Fedotkin

Researcher

Upcoming Talks

Splitting the Email Atom: Exploiting Parsers to Bypass Access Controls

Read more

HTTP/1.1 Must Die! The Desync Endgame

Read more