HTTP/3 in Burp Suite - it’s time to find a bigger wordlist
2026-10-05T08:51:49Z•d61ef5fc08ec8a86ac7a26798e1043ffb78e9eda11cb216007563f20fb5ff3c1
ai-security-researchauthentication-bypassbrowser-securityburp-suitecache-poisoningcookie-securitycsp-bypasscss-injectiondata-exfiltrationhttp-desynchttp2http3jwtparser-discrepancyrequest-smugglingsamlssrftoken-forgeryurl-validationwaf-bypassweb-application-securityweb-securitywebsocketxss
What happened
PortSwigger Research feed aggregating advanced web application security research from 2024–2026. Topics include HTTP/2 and HTTP/3 desynchronization, request smuggling, parser discrepancies, SAML authentication bypasses, cookie and WAF bypasses, CSS and browser-based data exfiltration, SSRF and URL validation bypasses, cache poisoning, XSS, CSP bypasses, JWT/token forgery, WebSocket testing, and AI-assisted vulnerability discovery. Several entries describe potentially critical authentication bypass and request desynchronization techniques, but the document is a research index rather than a situ
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- portswigger_research
- Record identifier
- d61ef5fc08ec8a86ac7a26798e1043ffb78e9eda11cb216007563f20fb5ff3c1
- Enrichment time
- 2026-10-05T08:51:49Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.