From classic HTML pages to advanced MFA bypasses, dive in with @atsika.bsky.social in an exploration of phishing techniques 🎣.

Learn some infrastructure tricks and delivery methods to bypass common detection.
👉 blog.quarkslab.com/technical-di...
(promise this one is legit 👀)

Got root, what now? Practical post-exploitation steps on an F5 Big-IP appliance, by team members drm and myst404.

offsec.almond.consulting/post-exploit...

Voting is now live for the Top ten web hacking techniques of 2023! Make a brew, browse the nominations, and cast your vote here:
portswigger.net/polls/top-10...

I've just published 'Smashing the state machine: the true potential of web race conditions'! Dive in to arm yourself with novel techniques & tooling, and help reshape this attack class:
https://portswigger.net/research/smashing-the-state-machine