#portswigger

1 stories this week · 2 this month · 5 in 6 months · mostly security

Stories per day · 30 days

5 stories, newest first · one card per story

Teams set scope and autonomy in advance, and Burp enforces those limits rather than the model.

Namespace tricks, animated JavaScript URLs and XSLT data URLs execute script, including via a Firefox response header.

7 min readsvg xss

A 2026 ranking scores ten DAST platforms, placing Burp Suite first for depth and published pricing.

PortSwigger's XSS cheat sheet lists filter-bypass patterns for script injection across major browsers, without a new CVE.

PortSwigger's James Kettle discusses HTTP Terminator, an AI-powered open source tool that uncovered new HTTP request-smuggling (desync) techniques.

Stories tagged #portswigger