Top 10 web hacking techniques of 2025
2026-03-18T20:52:07Z•f9b0d3c3ba0f5dda12f02e7af57f12230722e35468d013c1a709c59cf9ccc3d5
SAMLai-security-toolsauthentication-bypassburp-suitecache-exploitationcookie-prefix-bypasscss-exfiltrationhttp-desynchttponly-cookie-theftjwt-forgeryportswigger-researchrequest-smugglingsignsaboteurssrftiming-attackswaf-bypassweb-securitywebsocket-securityxss
What happened
Collection of PortSwigger Research posts (2024–2026) and the Top 10 Web Hacking Techniques of 2025. The feed aggregates high-impact web-security research including: parser-level SAML inconsistencies that enable authentication bypasses (Ruby/PHP ecosystems), HTTP/1.1 desynchronisation and request-smuggling exploitation techniques, cookie-prefix and HttpOnly bypasses, CSS-based data exfiltration methods, WebSocket analysis tooling, JWT forgery tooling (SignSaboteur), new desync/TRACE exploitation methods, and several AI-powered Burp Suite extensions (Repeater Strike, Shadow Repeater) and other,広
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- portswigger_research
- Record identifier
- f9b0d3c3ba0f5dda12f02e7af57f12230722e35468d013c1a709c59cf9ccc3d5
- Enrichment time
- 2026-03-18T20:52:07Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.