Top 10 Web Hacking Techniques of 2025 and a Hint for 2026 - James Kettle - ASW #380

Portswigger's list of web hacking techniques is a long-running celebration of curiosity and research from the web hacking community. James Kettle shares his thoughts on the entries from 2025 and how he expects LLMs and agents to influence what the list will look like for next year. He also shares some insights on using LLMs for his own blackbox research, giving us a peek into the work he'll be sharing at Black Hat USA this summer.

Resources

• https://portswigger.net/research/top-10-web-hacking-techniques-of-2025
• https://blackhat.com/us-26/briefings/schedule/index.html#can-ai-do-novel-security-research-meet-the-http-terminator-51894

Show Notes: https://securityweekly.com/asw-380