Top 10 web hacking techniques of 2025
2026-08-03T20:51:48Z•396c9c407b15e605162a8f560d23314287309593a9c2fff813ff61e9901b6a61
CSP-bypassCSS-exfiltrationHTTP-desynchronizationHTTP-request-smugglingIDORJWTPortSwiggerSAMLSSRFURL-validation-bypassWAF-bypassXSSaccess-controlauthentication-bypassbrowser-securitycookie-securityopen-redirectparser-discrepancyrace-conditionsecurity-researchtoken-forgeryweb-cache-poisoningweb-security
What happened
PortSwigger Research feed aggregating web security research published from 2023 through 2026. Topics include authentication and SAML parser bypasses, HTTP request smuggling and desynchronization, cookie and WAF bypasses, SSRF and URL validation bypasses, cache poisoning, CSS/XSS data exfiltration, race conditions, access-control flaws, token forgery, and browser or parser discrepancies. The collection is primarily research and offensive testing guidance rather than a single confirmed vulnerability; specific affected products and CVEs require review of individual articles.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- portswigger_research
- Record identifier
- 396c9c407b15e605162a8f560d23314287309593a9c2fff813ff61e9901b6a61
- Enrichment time
- 2026-08-03T20:51:48Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.