Interview with Andres Rauschecker - Hall of Fame high flyer
Summary: Andres Rauschecker, a 26-year-old Munich-based pentester with a Master's in Cybersecurity, is profiled as a high flyer in PortSwigger's Web Security Academy Hall of Fame. He describes using Burp Suite Pro at work and for CTFs, working through Academy labs on XSS, web cache poisoning and HTTP request smuggling, and reusing the labs' basic payloads in client demonstrations.
Bottom line: Rauschecker says he copies payloads straight from the Academy's lab solutions for client demos because they are basic and easy to explain - a reminder that free, public exploitation material is already circulating in the hands of the pentesters your teams hire and face.
Read the original at PortSwigger Research ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026