PortSwigger Research

blog.portswigger.net

Articles and product insights from the PortSwigger team. Keep up to date with Burp Suite and the world of web security by visiting our blog.

Popular posts: 3
Total points: 525
HN comments: 101
Rank: #2,590 company

Visit blog.portswigger.net → On Hacker News May 2016 – Jul 2017

Security & Privacy 3 Web & Frontend 2 Networking & Internet 1

Most points Most discussed Most cited Newest

Targeting HTTP's Hidden Attack-Surface

2017207 points13 comments Security & Privacy details

Modern websites are browsed through a lens of transparent systems built to enhance performance, extract analytics and supply numerous additional services. This almost invisible attack surface has been

Web Storage: the lesser evil for session tokens

2016195 points69 commentscited by 4Security & Privacy details

I was recently asked whether it was safe to store session tokens using Web Storage (sessionStorage/localStorage) instead of cookies. Upon googling this I found the top results nearly all assert that w

Executing non-alphanumeric JavaScript without parentheses

2016123 points19 comments Security & Privacy details

I decided to look into non-alphanumeric JavaScript again and see if it was possible to execute it without parenthesis. A few years ago I did a presentation on non-alpha code if you want some more info