# A hacking hat-trick: previewing three PortSwigger Research publications coming to DEF CON & Black Hat USA

DevFeed: [A hacking hat-trick: previewing three PortSwigger Research publications coming to DEF CON & Black Hat USA](<https://devfeed.tech/articles/a-hacking-hat-trick-previewing-three-portswigger-research-publications-coming-to-def-con-black-hat-usa-7666.md>)

Original publisher: [Read original article](<https://portswigger.net/research/a-hacking-hat-trick-previewing-three-portswigger-research-publications-coming-to-def-con-amp-black-hat-usa>)

Author: James Kettle

Published: 2024-07-02T12:57:08Z

Content type: article

Language: en

Sources: [PortSwigger Research](<https://devfeed.tech/sources/portswigger-research.md>)

Topics: [Hacking](<https://devfeed.tech/topics/hacking.md>), [releases](<https://devfeed.tech/topics/releases.md>), [Parser](<https://devfeed.tech/topics/parser.md>), [Scripting](<https://devfeed.tech/topics/scripting.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>), [ctf](<https://devfeed.tech/topics/ctf.md>)

Tags: [attacks](<https://devfeed.tech/tags/attacks.md>), [automated](<https://devfeed.tech/tags/automated.md>), [black-hat](<https://devfeed.tech/tags/black-hat.md>), [ctf](<https://devfeed.tech/tags/ctf.md>), [hacking](<https://devfeed.tech/tags/hacking.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [parsing](<https://devfeed.tech/tags/parsing.md>), [releases](<https://devfeed.tech/tags/releases.md>), [research](<https://devfeed.tech/tags/research.md>), [scripting](<https://devfeed.tech/tags/scripting.md>), [side-channel](<https://devfeed.tech/tags/side-channel.md>)

## AI overview

PortSwigger Research previews three publications scheduled for Black Hat USA and DEF CON 32. The article highlights practical timing attacks using timing oracles, including techniques for uncovering server secrets, masked misconfigurations, blind data-structure injection, hidden routes, and invisible attack surfaces. It also describes open-source tools for automated exploitation and attack scripting, a CTF, and a forthcoming session on the challenges of parsing email addresses.

## Source excerpt

We're delighted to announce three major research releases from PortSwigger Research will be published at both Black Hat USA and DEF CON 32. In this post, we'll offer a quick teaser of each talk, info