HTTP/3 in Burp Suite - it’s time to find a bigger wordlist
2026-09-28T08:51:48Z•2214b379c3410ab0792b97249de49a2aa2fe441e4061650bdfd7a1078102862f
access-controlai-assisted-security-testingauthentication-bypassburp-suitecache-poisoningcookie-securitycsp-bypasscss-injectionhttp-desynchronizationhttp3offensive-securityparser-discrepancyrequest-smugglingsamlsession-cookie-theftssrfunicode-overflowurl-validationweb-application-securityweb-security-researchwebsocketsxss
What happened
PortSwigger Research feed containing web security research and offensive testing techniques, including HTTP desynchronization, SAML authentication bypasses, cookie and parser discrepancies, CSS/XSS data exfiltration, URL validation bypasses, cache poisoning, CSP bypasses, and tooling for high-volume or AI-assisted vulnerability discovery. The collection includes potentially high-impact techniques such as authentication bypass, session-cookie theft, request smuggling/desync, SSRF and access-control bypass, but it is research-oriented and does not identify a single affected product or confirmed,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- portswigger_research
- Record identifier
- 2214b379c3410ab0792b97249de49a2aa2fe441e4061650bdfd7a1078102862f
- Enrichment time
- 2026-09-28T08:51:48Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.