HTTP/3 in Burp Suite - it’s time to find a bigger wordlist

PortSwigger Research feed containing web application security research and testing techniques, including HTTP desynchronization, parser discrepancies, SAML authentication bypasses, cookie and WAF bypasses, CSS and XSS data exfiltration, SSRF and URL validation bypasses, cache attacks, timing attacks, and AI-assisted Burp Suite tooling. The material is primarily research and offensive testing guidance rather than a single product vulnerability; several topics describe high-impact exploitation paths such as authentication bypass, session theft, request smuggling, and access-control bypass.