I was on my laptop, as I often am when there’s rubbish on telly, and found myself wondering what characters are allowed in a tag. I knew they had to begin with “a-zA-Z”, but what about after that? I t
Source link
Related Articles
All PortSwigger →
Zoom Whiteboard patches XSS bug
Table of Contents Escaping sanitization Weaponizing the clipboard The challenges of hybrid applications Check your third-party dependencies Ben Dickson 22 December 2022 at 12:00 UTC…
Finding that one weird endpoint, with Bambdas
Security research involves a lot of failure. It’s a perpetual balancing act between taking small steps with a predictable but boring outcome, and trying out…
Introducing HTTP Anomaly Rank
If you’ve ever used Burp Intruder or Turbo Intruder, you’ll be familiar with the ritual of manually digging through thousands of responses by repeatedly sorting…
Cookie Chaos: How to bypass __Host and __Secure cookie prefixes
Browsers added cookie prefixes to protect your sessions and stop attackers from setting harmful cookies. In this post, you’ll see how to bypass cookie defenses…
Mastodon users vulnerable to password-stealing attacks
Jessica Haworth 15 November 2022 at 15:39 UTC Updated: 15 November 2022 at 15:47 UTC Patched bug could have leaked credentials Attackers could steal password…
Repeater Strike: manual testing, amplified
Manual testing doesn’t have to be repetitive. In this post, we’re introducing Repeater Strike – a new AI-powered Burp Suite extension designed to automate the…