The voting has concluded, and we're thrilled to announce the top ten web hacking techniques of 2025! Massive thanks to everyone in the community for sharing their hard-earned discoveries, plus the panel and everyone who nominated or voted!
PortSwigger Research
@PortSwiggerResWeb security research from the team at @PortSwigger
![<svg onload="attributes[0].value=name,new onload">
window.name='alert(1)';
<svg onload=innerHTML=URL,eval(textContent)>
#
alert(1)
<form><input onclick="formAction=top.name,type='submit',new submit">
window.name='javascript:alert(1)';](/host-https-pbs.twimg.com/media/G5Zf-kTWQAAjmfU?format=webp&name=large)
