Let me know if you'd like to chat research at Black Hat or #defcon33! Also feel free to say hi if you see me about, I've got a not-very-subtle laptop cover to aid recognition 😂

There I am being careful to balance hyping my talk without going too far and then this gets published 😂 maybe the countdown timer is just too ominous!

HTTP Request Smuggling Explained (with James Kettle) 🎥👉🏼 youtu.be/QjPFjd8GJWY

Today at #BlackHatUSA - three major new releases from PortSwigger Research 1pm - 'HTTP Hacker' at Black Hat Arsenal with Martin Doyhenard 1pm - 'WebSocket Turbo Intruder' at Black Hat Arsenal with d4d 3.20m - 'HTTP/1.1 Must Die! The Desync Endgame' at Black Hat USA with

WebSocket Turbo Intruder 2.0 will be presented at #BlackHat2025 Arsenal today at 1pm. Location: Business Hall, Arsenal Station 5

The whitepaper is live! Learn how to win the HTTP desync endgame... and why HTTP/1.1 needs to die: http1mustdie.com

Super glad to have collaborated on James Kettle’s research this year with bsysop and Medusa. Funny enough, it all started with a random Slack DM that revealed a potential research collision with James, and things took off from there.

In Vegas this week? Join the PortSwigger Research team and Burp Suite creator Dafydd Stuttard for a drink tomorrow! 5-7pm Centra at The Luxor d4d James Kettle Martin Doyhenard #BurpOnTour2025

This research forcibly taught me just how valuable collaboration is! You probably already knew that but it was eye opening for me! Excited to try more in future…

ActiveScan++ can now detect multiple advanced unicode exploits just dropped at #BHUSA including confusables, codepoint overflows, case-conversion and combining diacritics! Thanks to researchers Ryan Barnett (B0N3) @ hackersummercamp & Angel Hacker for contributing this awesome update.

I'm in the chillout lounge if anyone wants to chat.

For a limited time you can still watch the talk here: m.youtube.com/watch?v=sslnkb…

Thanks PortSwigger and Bug Bounty Village for this awesome event — and also to my DEVCORE buddies for standing on stage to collect the trophy for me! A little follow-up article on this research is coming soon... stay tuned! 🤘