Top 10 web hacking techniques of 2023
Welcome to the Top 10 Web Hacking Techniques of 2023, the 17th edition of our annual community-powered effort to identify the most innovative must-read web s...
research
4 articles
Hiding payloads in Java source code strings
In this post we'll show you how Java handles unicode escapes in source code strings in a way you might find surprising - and how you can abuse them to concea...
Top 10 web hacking techniques of 2023 - nominations open
Update: The results are in!
Finding that one weird endpoint, with Bambdas
Security research involves a lot of failure.