# Top 10 web hacking techniques of 2024

DevFeed: [Top 10 web hacking techniques of 2024](<https://devfeed.tech/articles/top-10-web-hacking-techniques-of-2024-7709.md>)

Original publisher: [Read original article](<https://portswigger.net/research/top-10-web-hacking-techniques-of-2024>)

Author: James Kettle

Published: 2025-02-04T15:01:48Z

Content type: article

Language: en

Sources: [PortSwigger Research](<https://devfeed.tech/sources/portswigger-research.md>)

Topics: [Hacking](<https://devfeed.tech/topics/hacking.md>), [Application Security](<https://devfeed.tech/topics/application-security.md>), [Security](<https://devfeed.tech/topics/security.md>), [web applications](<https://devfeed.tech/topics/web-applications.md>), [OAuth](<https://devfeed.tech/topics/oauth.md>), [Cache](<https://devfeed.tech/topics/cache.md>), [account takeover](<https://devfeed.tech/topics/account-takeover.md>), [LocalStorage](<https://devfeed.tech/topics/localstorage.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>)

Tags: [2025](<https://devfeed.tech/tags/2025.md>), [account-takeover](<https://devfeed.tech/tags/account-takeover.md>), [cache](<https://devfeed.tech/tags/cache.md>), [chatgpt](<https://devfeed.tech/tags/chatgpt.md>), [cookies](<https://devfeed.tech/tags/cookies.md>), [hacking](<https://devfeed.tech/tags/hacking.md>), [oauth](<https://devfeed.tech/tags/oauth.md>), [research](<https://devfeed.tech/tags/research.md>), [security](<https://devfeed.tech/tags/security.md>), [techniques](<https://devfeed.tech/tags/techniques.md>), [web](<https://devfeed.tech/tags/web.md>), [xss](<https://devfeed.tech/tags/xss.md>)

## AI overview

This annual community-powered review identifies notable web security research and hacking techniques from 2024. The supplied excerpts discuss OAuth flow hijacking through Cookie Tossing, risks involving cookies and JavaScript's Same-Origin Policy, and a ChatGPT account takeover using inconsistent decoding, path traversal, and Web Cache Deception.

## Source excerpt

Welcome to the Top 10 Web Hacking Techniques of 2024, the 18th edition of our annual community-powered effort to identify the most innovative must-read web security research published in the last year