Tom Stacey

Tom 't0xodile' Stacey is a security researcher at PortSwigger with a passion for automating the ideas that "will never work" to find gaps in the industry's current understanding of web security. He is best known for his work in discovering and exploiting underappreciated forms of desync attacks.

At PortSwigger he spends most of his time experimenting with the HTTP protocol and the vulnerabilities that arise due to the disagreements between web servers and components with the goal of finding novel techniques to improve Burp Suite's capabilities. When he's not at work, he's usually playing some form of video / board game or building Lego.