Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



WebApp Sec: RE: eWeek OpenHack challenge

RE: eWeek OpenHack challenge

From: Dave Aitel <dave_at_immunitysec.com>
Date: 23 Oct 2002 16:36:47 -0400

You could always DoS the IIS 5.0 box with SPIKE. :>
-dave

On Wed, 2002-10-23 at 14:52, David Wong wrote:
> The documentation claims that the Oracle app is running Redhat Linux.
>
> Quoting http://www.eweek.com/article2/0,3959,633769,00.asp
>
> "Microsoft implemented its application using .Net Framework, Internet
> Information Services 5.0 and SQL Server 2000, all running on Windows
> 2000 Advanced Server. Oracle developed its application using Oracle9i
> Application Server Release 2 and Oracle9i Database Release 2, both
> running on Red Hat Inc.'s Red Hat Linux Advanced Server 2.1."
>
>
> -----Original Message-----
> From: Bryce Porter [mailto:bryce_at_thewebcircuit.com]
> Sent: Tuesday, October 22, 2002 6:02 PM
> To: David Wong
> Cc: webappsec_at_securityfocus.com
> Subject: Re: eWeek OpenHack challenge
>
>
> this is a joke. they are so narrow in presenting this and they fail to
> realize that the majority of web used in commercial applications run on
> some kind of Unix variant like Linux, HP-UX, AIX or some BSD. making a
> contest that applies to the minority of commercial applications is
> pretty shallow and baseless in my opinion.
>
> ----- Original Message -----
> From: "David Wong" <david.wong_at_foundstone.com>
> To: <webappsec_at_securityfocus.com>
> Sent: Monday, October 21, 2002 12:27 AM
> Subject: eWeek OpenHack challenge
>
>
> > eWeek is starting the 4th iteration openhack (http://www.openhack.com)
>
> > contest this week
> > (http://www.eweek.com/category2/1,3960,600431,00.asp)
> >
> > This year, it's focused on application security.
> >
> > Comments?
> >
>

-- 
Dave Aitel <dave_at_immunitysec.com>
Immunity, Inc

Received on Oct 23 2002
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos