Top 10 Web Hacking Techniques of 2024 - James Kettle - ASW #318
About this episode
We're getting close to two full decades of celebrating web hacking techniques. James Kettle shares which was his favorite, why the list is important to the web hacking community, and what inspires the kind of research that makes it onto the list. We discuss why we keep seeing eternal flaws like XSS and SQL injection making these lists year after year and how clever research is still finding new attack surfaces in old technologies. But there's a lot of new web technology still to be examined, from HTTP/2 and HTTP/3 to WebAssembly.
Segment Resources:
- Top 10, 2024: https://portswigger.net/research/top-10-web-hacking-techniques-of-2024
- Full nomination list: https://portswigger.net/research/top-10-web-hacking-techniques-of-2024-nominations-open
- Project overview: https://portswigger.net/research/top-10-web-hacking-techniques
Visit https://www.securityweekly.com/asw for all the latest episodes!
Show Notes: https://securityweekly.com/asw-318
Get every episode summarized
Each time Security Weekly Podcast Network (Audio) publishes, we email you a written briefing from the transcript — the topics, who appeared, and any specific claims, with the ad reads skipped.
Email me new episodesFree for 3 shows. No card needed.
No transcript yet
This episode has not been transcribed. Request it and it moves to the front of the queue.
More episodes
More from Security Weekly Podcast Network (Audio)
9/11 at 25, OfferLoader, Gemini CLI, Liquid, 10% Doom, Josh Marpet, and More - S...
Security Weekly Podcast Network (Audio)
It's More Secure When It's Disabled - PSW #943
Security Weekly Podcast Network (Audio)
Security Money: The Index Explodes, as the History of AI Teaches Us About Invest...
Security Weekly Podcast Network (Audio)
Cybercabs, Robohobos, BigBear, Nightmare Eclipse, weChat, Flock, ASCII, Aaran Le...
Security Weekly Podcast Network (Audio)