HTTP/3 in Burp Suite - it’s time to find a bigger wordlist
2026-10-02T08:51:48Z•e2bf4e9bd2ad4b2bb39a67eec93623c1a1b8e4374b0fcf9e6e3a9a5796564b0b
AI-security-researchCORSCSP-bypassCSS-injectionHTTP-3HTTP-desyncHTTP-request-smugglingJWTSAMLSSRFXSSapplication-securityauthentication-bypasscookie-securityoffensive-securityopen-redirectparser-discrepancypenetration-testingsession-hijackingtiming-attacksweb-cache-poisoningweb-security
What happened
PortSwigger Research feed aggregating recent web security research, including HTTP/2 and HTTP/3 desynchronization, request smuggling, parser discrepancies, SAML authentication bypasses, cookie security bypasses, CSS and XSS data exfiltration, URL validation bypasses, cache poisoning, timing attacks, CSP bypasses, and AI-assisted testing tools. The material is primarily offensive security research and practical exploitation guidance; several topics describe authentication bypass or session compromise techniques, but no single CVE is identified in the supplied feed metadata.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- portswigger_research
- Record identifier
- e2bf4e9bd2ad4b2bb39a67eec93623c1a1b8e4374b0fcf9e6e3a9a5796564b0b
- Enrichment time
- 2026-10-02T08:51:48Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.