Later archive addition

Backslash Powered Scanning: hunting unknown vulnerability classes

James Kettle · PortSwigger · 4 November 2016

Explains how generic input transformations and differential response analysis can identify unfamiliar server-side injection behavior. Backslash Powered Scanner develops observations through iterative checks while distinguishing confirmed vulnerabilities from leads requiring manual review.

Record

Researcher

James Kettle

Published by

PortSwigger

Date

4 November 2016

In the archive

• Added to the 2016–17 archive after the original list was published

Related sources

• Original paper
• Original slides
• Research tool
• Research tool
• Earlier research tool
• Embedded video

Tags

• tooling
• fuzzing
• injection
• detection
• sqli
• ssti
• owasp-a03-2021
• owasp-a09-2021

This page is the archive's own catalogue record. The research is the work of James Kettle, first published at the original source. Preserved copies are kept so the citation survives its host.