The Daily Swig

The Daily Swig - Your source for the most recent updates on cybersecurity happenings globally. https://portswigger.net/daily-swig/were-going-teetotal-its-goodbye-to-the-daily-swig No longer in publication.

International

English

Online/Digital

Outlet metrics

Domain Authority

Ranking

Global

#40784

India

#15220

Computers Electronics and Technology/Computer Security

#42

Traffic sources

Monthly visitors

Articles

Top 10 web hacking techniques of 2024

2 months ago | portswigger.net | James Kettle

Published: 04 February 2025 at 15:01 UTC Updated: 04 February 2025 at 15:20 UTC Welcome to the Top 10 Web Hacking Techniques of 2024, the 18th edition of our annual community-powered effort to identify the most innovative must-read web security research published in the last year. This post is the culmination of a three-step collaboration with the security community.
Top 10 web hacking techniques of 2024: nominations open

Jan 8, 2025 | portswigger.net | James Kettle

Published: 08 January 2025 at 14:07 UTC Updated: 08 January 2025 at 14:39 UTC Nominations are now open for the top 10 new web hacking techniques of 2024! Every year, security researchers from all over the world share their latest findings via blog posts, presentations, PoCs, and whitepapers. These contributions are all invaluable, but some stand out for their innovative approaches and the potential to be re-applied or adapted in new ways.
Top ten web hacking techniques of 2024: nominations open

Jan 8, 2025 | portswigger.net | James Kettle

Published: 08 January 2025 at 14:07 UTC Updated: 08 January 2025 at 14:07 UTC Nominations are now open for the top 10 new web hacking techniques of 2024! Every year, security researchers from all over the world share their latest findings via blog posts, presentations, PoCs, and whitepapers. These contributions are all invaluable, but some stand out for their innovative approaches and the potential to be re-applied or adapted in new ways.
Performance Improvements to table sorting and Repeater

Sep 11, 2024 | portswigger.net | Daniel Allen

Daniel Allen |11 September 2024 at 06:53 UTC Performance is a critical factor in the usability and efficiency of any software, and Burp Suite is no exception. We've recently focused on enhancing Burp Suite's performance across several key areas and have made significant strides in reducing processing times, minimizing memory usage, and ensuring a smoother user experience. Read on for a deep dive into a couple of the performance issues we tackled in recent releases.
Listen to the whispers: web timing attacks that actually work

Aug 7, 2024 | portswigger.net | James Kettle

Published: 07 August 2024 at 18:10 UTC Updated: 07 August 2024 at 18:14 UTC Websites are riddled with timing oracles eager to divulge their innermost secrets. It's time we started listening to them. In this paper, I'll unleash novel attack concepts to coax out server secrets including masked misconfigurations, blind data-structure injection, hidden routes to forbidden areas, and a vast expanse of invisible attack-surface.
A hacking hat-trick: previewing three PortSwigger Research publications coming to DEF CON & Black Hat USA

Jul 2, 2024 | portswigger.net | James Kettle

Published: 02 July 2024 at 12:57 UTC Updated: 02 July 2024 at 13:15 UTC We're delighted to announce three major research releases from PortSwigger Research will be published at both Black Hat USA and DEF CON 32. In this post, we'll offer a quick teaser of each talk, info on accompanying tools and labs, and suggested pre-reading to get the most out of them.
Refining your HTTP perspective, with bambdas

May 29, 2024 | portswigger.net | James Kettle

Published: 29 May 2024 at 13:31 UTC Updated: 29 May 2024 at 13:31 UTC When you open a HTTP request or response, what do you instinctively look for? Suspicious parameter names? CORS headers? Some clue as to the request's origin or underlying purpose? A single HTTP message can tell a different story to every viewer, but modern websites send thousands so it's all too easy to overlook something critical.
One month of Burp Suite in the Cloud - how are AppSec teams using it?

May 7, 2024 | portswigger.net | Mike Eaton

Mike Eaton |07 May 2024 at 14:25 UTC It’s now been a month since we launched the new Cloud-based Burp Suite Enterprise Edition, and we’re taking a look at the benefits our users have seen so far. Burp Suite Enterprise Edition in the Cloud is designed to help AppSec teams scale their security testing with automated DAST scanning, without the burden of setting up and maintaining their infrastructure. What benefits are AppSec teams seeing?
Introducing DAST scanning in the Cloud, with Burp Suite Enterprise Edition

Apr 18, 2024 | portswigger.net | Mike Eaton

Mike Eaton |18 April 2024 at 13:56 UTC We’re excited to announce that Burp Suite Enterprise Edition is now available in PortSwigger’s secure cloud. You can now free up testing time with scalable, automated DAST scanning, without the burden of maintaining infrastructure. Automate and scale your security testing in minutes Our recent survey of security teams found that 85% of organizations want to automate their security testing in 2024.
Top 10 web hacking techniques of 2023

Feb 19, 2024 | portswigger.net | James Kettle

Published: 19 February 2024 at 14:31 UTC Updated: 19 February 2024 at 14:31 UTC Welcome to the Top 10 Web Hacking Techniques of 2023, the 17th edition of our annual community-powered effort to identify the most innovative must-read web security research published in the last year. This year, in response to our call for nominations the community submitted a record 68 entries, and cast votes to select 15 finalists.