WebApp Sec: by date

• RSS Feed
•  About List
•  All Lists

Previous period

Next period

304 messages starting Oct 16 02 and ending Dec 31 02
Date index | Thread index | Author index

Re: Apache and logging POST data Craig_Sullivan
RE: Apache and logging POST data Chief Financial Officer

Friday, 18 October

"Forgot Password" function Brecrost Jones
Re: "Forgot Password" function David Bullock
Re: "Forgot Password" function Mark Curphey
Re: "Forgot Password" function Kevin Spett
Re: "Forgot Password" function Haroon Meer
Re: "Forgot Password" function Jeroen Latour
Re: "Forgot Password" function Chris Shepherd
Re: "Forgot Password" function Kevin Spett

Saturday, 19 October

Re: "Forgot Password" function Brecrost Jones
Re: "Forgot Password" function Kevin Spett
RE: "Forgot Password" function wsmith
Password Recovery (long) was Re: "Forgot Password" function Charles Miller
Re: Password Recovery (long) was Re: "Forgot Password" function Sverre H. Huseby
RE: "Forgot Password" function Matthew_Chalmers
Re: Password Recovery (long) was Re: "Forgot Password" function Charles Miller

Sunday, 20 October

Re: Password Recovery (long) was Re: "Forgot Password" function Charles Miller
RE: "Forgot Password" function William Bartholomew

Monday, 21 October

Re: "Forgot Password" function Kevin Spett
eWeek OpenHack challenge David Wong

Tuesday, 22 October

Call For Papers Announcement: Black Hat Windows Security Jeff Moss

Wednesday, 23 October

Re: eWeek OpenHack challenge Mark Curphey
RE: eWeek OpenHack Johnson, Michael1 [IT]
Re: eWeek OpenHack challenge Bryce Porter
Re: eWeek OpenHack challenge Kevin Spett
RE: eWeek OpenHack challenge David Wong
Re: eWeek OpenHack challenge Vasiliy Boulytchev
RE: eWeek OpenHack challenge Dave Aitel

Thursday, 24 October

Re: eWeek OpenHack challenge Marty Block
RE: eWeek OpenHack challenge Bill Martin
Re: eWeek OpenHack challenge Kevin Spett
OWASP Report and plan for 2003 Now Online The Owasp Project
OWASP WebGoat release WebMaven v1.0 bill

Monday, 28 October

Secure Coding for Newbies? Joe User
Re: Secure Coding for Newbies? Kevin Spett
Re: Secure Coding for Newbies? Jeff Williams @ Aspect
Re: Secure Coding for Newbies? Dan Cuthbert
Re: Secure Coding for Newbies? zeno
Re: Secure Coding for Newbies? Michael R . Bagnall
Re: Secure Coding for Newbies? security
Re: Secure Coding for Newbies? Dave Aitel
Re: Secure Coding for Newbies? Alex Russell

Tuesday, 29 October

cgi to update a datable table Allan Wind
Strange beaviour in sql injection Securityinfos
RE: Strange beaviour in sql injection Dennis Hurst
RE: cgi to update a datable table Blake Frantz
Re: Strange beaviour in sql injection Kevin Spett
RE: cgi to update a datable table Shields, Larry
Re: cgi to update a datable table Allan Wind
Java Object Inspector 1.0 Jan P. Monsch
Re: cgi to update a datable table Allan Wind

Wednesday, 30 October

XXE (Xml eXternal Entity) attack Gregory Steuck
RE: Strange beaviour in sql injection Brass, Phil (ISS Atlanta)
Re: XXE (Xml eXternal Entity) attack Miles Sabin

Thursday, 31 October

RE: XXE (Xml eXternal Entity) attack Michael Howard

Friday, 01 November

Demystifying SASL Sasha Romanosky

Monday, 04 November

Re: XXE (Xml eXternal Entity) attack Matt Sergeant

Wednesday, 06 November

IIS 5.0 with Integrated Window Authentication cc_mofo
Re: IIS 5.0 with Integrated Window Authentication Haroon Meer
RE: IIS 5.0 with Integrated Window Authentication Michael Howard

Thursday, 07 November

"SAML 1.0 specification gets a thumbs-up" Tim Valdez
RE: IIS 5.0 with Integrated Window Authentication Jason Coombs
Re: IIS 5.0 with Integrated Window Authentication Sebastian Flothow
Securing OWA on public computers. agtads
Re: IIS 5.0 with Integrated Window Authentication sunzi
Re: IIS 5.0 with Integrated Window Authentication Dave Aitel
Re: Securing OWA on public computers. Kurt Seifried

Friday, 08 November

Re: IIS 5.0 with Integrated Window Authentication Dave Aitel
Definitive How-To for Spike Jeremy Junginger

Saturday, 09 November

Re: IIS 5.0 with Integrated Window Authentication cc_mofo
Re: [Spike] Re: IIS 5.0 with Integrated Window Authentication Dave Aitel
When GET = POST? Chris Thomas
Re: When GET = POST? Alonso Robles
Re: When GET = POST? David Bullock
RE: When GET = POST? Tony Welsh

Sunday, 10 November

Re: Securing OWA on public computers. Alexander
Re: When GET = POST? Jonas Anden
Re: When GET = POST? Adrian Wiesmann
Re: When GET = POST? Vincent Janelle

Monday, 11 November

Re: When GET = POST? Kevin Spett
Mozilla Pheonix Prevents XSS ? securityarchitect
Re: When GET = POST? Jason Childers
Re: When GET = POST? Charles Miller

Tuesday, 12 November

Re: When GET = POST? Jeff Dafoe
Re: When GET = POST? Steven M. Christey
Re: When GET = POST? Jason Healy
Re: When GET = POST? Kevin Spett
Re: When GET = POST? Daniel Hedrick
nikto output question Martin Wasson

Wednesday, 13 November

Re: IIS 5.0 with Integrated Window Authentication cc_mofo

Thursday, 14 November

OWASP Security RUP Plug-in and Java App Server Security Config Guides Mark Curphey
RE: When GET = POST? Glyn Geoghegan
RE: When GET = POST? Glyn Geoghegan

Friday, 15 November

Re: nikto output question sunzi

Monday, 18 November

SPIKE Proxy 1.4.6 released Dave Aitel

Tuesday, 19 November

OWASP WebGoat V2 - beta 1 (Java) Mark Curphey
OWASP CodeSeeker - An Open Source Application Firewall and IDS Mark Curphey

Friday, 22 November

web appliaction security products (AKA application firewalls) Shimon Silberschlag

Saturday, 23 November

Re: web appliaction security products (AKA application firewalls) Skip Carter
Re: web appliaction security products (AKA application firewalls) Kevin Spett

Sunday, 24 November

Metis 2.0 released Sacha Faust
RE: web appliaction security products (AKA application firewalls) Lars Troen
Re: web appliaction security products (AKA application firewalls) Dave Aitel
Hijacking URL Encoded Session IDs using Referer Logs Bob Lee
Re: web appliaction security products (AKA application firewalls) securityarchitect
RE: web appliaction security products (AKA application firewalls) Fernando Martins
Re: web appliaction security products (AKA application firewalls) Jason Childers
Re: web appliaction security products (AKA application firewalls) Dave Aitel

Monday, 25 November

HTTP authentication and session timeout UDP 53
Re: Hijacking URL Encoded Session IDs using Referer Logs zeno
Re: Hijacking URL Encoded Session IDs using Referer Logs Bob Lee
RE: HTTP authentication and session timeout Dawes, Rogan (ZA - Johannesburg)
Re: Hijacking URL Encoded Session IDs using Referer Logs Jeff Dafoe
Re: Hijacking URL Encoded Session IDs using Referer Logs Bob Lee
Re: Hijacking URL Encoded Session IDs using Referer Logs ONEILL David J
Re: HTTP authentication and session timeout Craig Skelton
Re: Hijacking URL Encoded Session IDs using Referer Logs zeno
Re: web appliaction security products (AKA application firewalls) Bennett Todd
Re: Hijacking URL Encoded Session IDs using Referer Logs Craig_Sullivan
Re: Hijacking URL Encoded Session IDs using Referer Logs Jeff Dafoe
RE: HTTP authentication and session timeout Jason Coombs

Tuesday, 26 November

Re: Hijacking URL Encoded Session IDs using Referer Logs Bob Lee
Re: HTTP authentication and session timeout Craig Skelton

Saturday, 30 November

Re: HTTP Authentication & Source IP Address James Wilkinson
Re: HTTP Authentication & Source IP Address Dorian Moore
RE: HTTP Authentication & Source IP Address Matt Petteys
Re: HTTP Authentication & Source IP Address Jeff Dafoe
Dead Thread - HTTP Authentication & Source IP Address Mark Curphey
Top Ten Web App Sec Problems Mark Curphey
Web App Sec ROI Mark Curphey
Re: Top Ten Web App Sec Problems zeno
Re: Web App Sec ROI zeno
Re: Web App Sec ROI securityarchitect
Re: Top Ten Web App Sec Problems Mark Curphey
Re: Strange beaviour in sql injection Mariusz Pekala
Re: Top Ten Web App Sec Problems Matt Curtin

Sunday, 01 December

Re: Top Ten Web App Sec Problems bt
Great XML Security Primer Mark Curphey

Monday, 02 December

Can I obtain BASIC AUTH credentials using an XSS vulnerbility frank fish
FW: Top Ten Web App Sec Problems Keith T. Morgan
Re: Top Ten Web App Sec Problems Alex Russell
WebAppSec Training Courses in UK phuc4
Re: Top Ten Web App Sec Problems Steven M. Christey
Re: WebAppSec Training Courses in UK Dan Cuthbert
Re: WebAppSec Training Courses in UK Kevin Spett
Re: WebAppSec Training Courses in UK Mark Curphey
RE: Top Ten Web App Sec Problems Richard M. Smith
Re: Top Ten Web App Sec Problems Andrew Jaquith

Tuesday, 03 December

Re: Top Ten Web App Sec Problems Kevin Spett
Re: Top Ten Web App Sec Problems Alex Lambert
Re: Top Ten Web App Sec Problems Alex Russell
Re: Top Ten Web App Sec Problems Marc Slemko
Re: Top Ten Web App Sec Problems Jeff Williams @ Aspect
RE: WebAppSec Training Courses in UK Glyn Geoghegan
RE: Top Ten Web App Sec Problems Craig, Scott
OpenHack and OWASP Testing Methodology David Endler
Re: OpenHack and OWASP Testing Methodology jcosta
RE: WebAppSec Training Courses in UK securityarchitect
RE: Top Ten Web App Sec Problems Steven M. Christey
RE: Top Ten Web App Sec Problems Richard M. Smith
Re: WebAppSec Training Courses in UK Kevin Spett

Wednesday, 04 December

Re: WebAppSec Training Courses in UK Jeff Williams @ Aspect
Re: WebAppSec Training Courses in UK Kevin Spett
RE: Top Ten Web App Sec Problems b0iler _
Re: WebAppSec Training Courses in UK Jeff Williams @ Aspect
RE: WebAppSec Training Courses in UK Glyn
RE: WebAppSec Training Courses in UK Craig_Sullivan
Re: Top Ten Web App Sec Problems Jeff Williams @ Aspect
RE: WebAppSec Training Courses in UK securityarchitect
RE: WebAppSec Training Courses in UK Craig_Sullivan
Re: Top Ten Web App Sec Problems Steven M. Christey

Thursday, 05 December

Re: Can I obtain BASIC AUTH credentials using an XSS vulnerbility Jill Tovey
Re: Hijacking URL Encoded Session IDs using Referer Logs UDP 53
IIS session cookies Cade Cairns

Sunday, 08 December

Re: IIS session cookies Kevin Spett
Re: IIS session cookies Cade Cairns
Re: IIS session cookies Takayuki Nakamura
Computer world article highliting the importance of webappsec Keith T. Morgan
Re: IIS session cookies Kevin Spett
RE: IIS session cookies Michael Howard
Re: IIS session cookies securityarchitect
OWASP Guide Version 2 - New Authors Wanted Mark Curphey
RE: IIS session cookies Forrest Lee Andrews

Monday, 09 December

RE: IIS session cookies Kapila, Sai
Sequence Identification Routines? Nick Jacobsen
RE: Computer world article highlighting the importance of webapps ec St. Clair, James
Re: Great XML Security Primer Javier Fernández-Sanguino Peña
Re: Sequence Identification Routines? Charlie Root
Web single sign-on Marty
Re: Sequence Identification Routines? Jeff Williams @ Aspect
Re: Web single sign-on securityarchitect
RE: Sequence Identification Routines? Tony Welsh
Re: Web single sign-on wbjw
RE: Web single sign-on Simon Cunningham
Re: Sequence Identification Routines? maddany
RE: Web single sign-on securityarchitect
JSP Security - Limiting URL's securityarchitect
RE: Web single sign-on Sarbjit Singh Gill

Tuesday, 10 December

Re: JSP Security - Limiting URL's Jeff Williams @ Aspect
Apache module: mod_security Ivan Ristic
XSS John Madden
Re: JSP Security - Limiting URL's Andrew Jaquith
Re: JSP Security - Limiting URL's Steve Posick
Re: Apache module: mod_security Dave Aitel
Re: JSP Security - Limiting URL's Jeremy Poteet
Re: XSS zeno
RE: XSS Eyal Udassin
Re: Apache module: mod_security Bill Burge
Re: XSS Kevin Spett
Re: Apache module: mod_security Ivan Ristic
RE: Sequence Identification Routines? Dawes, Rogan (ZA - Johannesburg)
Re: Apache module: mod_security Klaus Doerrscheidt
RE: XSS Ernesto Funes
Re: Web single sign-on Greg Gagnon
Re: Apache module: mod_security Ivan Ristic
FW: Web single sign-on johneder
Re: XSS John Madden
Re: XSS zeno
RE: XSS David Endler
Re: Apache module: mod_security zeno
Re: Apache module: mod_security Gabe Lawrence
RE: Sequence Identification Routines? securityarchitect
Re: JSP Security - Limiting URL's mlh
RE: XSS Brett Moore
Re: XSS zeno
Re: XSS Kevin Spett

Wednesday, 11 December

Re: Web single sign-on Andrew Chong
Re: XSS Stephen de Vries
ENC: W3C XML encryption specs approved Mads Rasmussen
Re: XSS Matthew Miller
Re: XSS Jeff Williams @ Aspect
forbidden functions on client-side scripts Shimon Silberschlag
Re: XSS Ed Tracy @ Aspect Security

Thursday, 12 December

Re: XSS Matthew Miller
RE: forbidden functions on client-side scripts Uzi Refaeli
Re: Web Application Analysis Tools? Kevin Spett
Re: Web Application Analysis Tools? Martin Eiszner
Re: Web Application Analysis Tools? Jeff Williams @ Aspect
RE: Web Application Analysis Tools? Lars Troen
Java validaton article Andrew Jaquith
Web Application Analysis Tools? David Simcik
Re: Web Application Analysis Tools? Kevin Spett

Friday, 13 December

Re: forbidden functions on client-side scripts Alonso Robles
RE: forbidden functions on client-side scripts Thor Larholm

Monday, 16 December

Re: XSS appsec
Re: XSS HarryM
XSS Strings securityarchitect
Re: XSS Strings Martin Eiszner
Re: XSS Strings Jeroen Latour
RE: XSS Strings Glyn
Re: XSS Strings Tomas
XSS and URL Encoded Session IDs B F

Tuesday, 17 December

modify non-persistent cookies mono toy
RE: XSS and URL Encoded Session IDs The Crocodile
Re: XSS and URL Encoded Session IDs Ryan Yagatich
Re: XSS and URL Encoded Session IDs Matthew Miller
Re: modify non-persistent cookies Peter Conrad
RE: modify non-persistent cookies Glyn
Re: modify non-persistent cookies MICHAEL GERMONY
RE: modify non-persistent cookies Chris Neppes
RE: modify non-persistent cookies Venkat, Sanjay
Re: modify non-persistent cookies securityarchitect
Re: modify non-persistent cookies Charles Miller

Wednesday, 18 December

Re: modify non-persistent cookies Mr. Rufus Faloofus
Re: modify non-persistent cookies zeno
RE: modify non-persistent cookies Uzi Refaeli
Fwd: Security Paper: Session Fixation Vulnerability in Web-based Applications Mark Curphey
Re: modify non-persistent cookies Kevin Spett
post to bugtraq about "session fixation" Alex Russell
Re: post to bugtraq about "session fixation" securityarchitect
Re: post to bugtraq about "session fixation" Panayiotis A. Thermos
Re: post to bugtraq about "session fixation" Kevin Spett
Re: post to bugtraq about "session fixation" Alex Russell

Thursday, 19 December

Re: modify non-persistent cookies Choong-Fook Fong
SUMMARY modify non-persistent cookies and more q's mono toy
RE: SUMMARY modify non-persistent cookies and more q's Dawes, Rogan (ZA - Johannesburg)
Re: SUMMARY modify non-persistent cookies and more q's Dave Aitel
Re: SUMMARY modify non-persistent cookies and more q's Kevin Spett
Re: Fwd: Security Paper: Session Fixation Vulnerability in Web-based Applications Sverre H. Huseby
Re: XSS Sverre H. Huseby
Re: Security Paper: Session Fixation Vulnerability in Web-based Applications Bill Pennington
encoder N30
Re: post to bugtraq about "session fixation" Steven M. Christey
Re: encoder Kevin Spett

Friday, 20 December

Re: Fwd: Security Paper: Session Fixation Vulnerability in Web-based Applications Craig_Sullivan
Re: post to bugtraq about "session fixation" Cesar
Merry Christmas and a Happy New Year. Mark Curphey
Re: SUMMARY modify non-persistent cookies and more q's Chris Wysopal
Re: post to bugtraq about "session fixation" H D Moore

Sunday, 22 December

securing web based game Tomas
Mangle available for download Dawes, Rogan (ZA - Johannesburg)
Re: securing web based game Adam [ckkl]
Re: securing web based game Adrian Wiesmann

Monday, 23 December

Re: securing web based game Adam [ckkl]
Re: securing web based game Tomas
Re: securing web based game Tim Aranki

Monday, 30 December

JDBC PreparedStatements, Java Data Objects/O-R mapping, and SQL Injection Christopher Todd
Re: JDBC PreparedStatements, Java Data Objects/O-R mapping, and SQL Injection Kevin Spett
Re: JDBC PreparedStatements, Java Data Objects/O-R mapping, and SQL Injection Dave Aitel

Tuesday, 31 December

Re: JDBC PreparedStatements, Java Data Objects/O-R mapping, and SQL Injection Kevin Spett
Re: JDBC PreparedStatements, Java Data Objects/O-R mapping, and SQL Injection Jeff Williams @ Aspect
RE: JDBC PreparedStatements, Java Data Objects/O-R mapping, and SQL Injection Michael Howard
RE: JDBC PreparedStatements, Java Data Objects/O-R mapping, and SQL Injection Christopher Todd

Previous period

Next period