Top 10 Web Hacking Techniques | Port Swigger Research
Summary: PortSwigger Research describes an annual project, started by Jeremiah Grossman and Matt Johansen in 2006, in which the infosec community and a cross-company panel of experts select the top 10 web hacking techniques of each year. The project ran on Jeremiah's blog and then WhiteHat until it stopped in 2015, and PortSwigger picked it up in 2017, with archive links kept for the older posts from 2006 through 2015.
Key Takeaway: The source's own point is that understated discoveries from aspiring researchers get overlooked and even flashy vulnerabilities are eventually forgotten as people chase the next shiny logo, so a curated annual list is the mechanism that keeps that research from disappearing.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026