WebApp Sec: by thread

• RSS Feed
•  About List
•  All Lists

Previous period

Next period

201 messages starting Oct 01 03 and ending Dec 31 03
Date index | Thread index | Author index

• SQL injection with sql 2000 sp3 dsan (Oct 01)
  • RE: SQL injection with sql 2000 sp3 Vinny Bedus (Oct 01)
• Windows HTTP Editor websecquestions (Oct 02)
  • Re: Windows HTTP Editor Bill Pennington (Oct 02)
  • Re: Windows HTTP Editor PortSwigger (Oct 03)
  • RE: Windows HTTP Editor JD (Oct 08)
  • <Possible follow-ups>
  • Re: Windows HTTP Editor Joris De Donder (Oct 02)
  • RE: Windows HTTP Editor Dawes, Rogan (ZA - Johannesburg) (Oct 03)
  • RE: Windows HTTP Editor Cuthbert, Daniel (Oct 03)
  • Re: Windows HTTP Editor andric cheung (Oct 03)
• Setting IIS and iPlanet websecquestions (Oct 02)
  • RE: Setting IIS and iPlanet dave kleiman (Oct 02)
  • <Possible follow-ups>
  • RE: Setting IIS and iPlanet Michael Howard (Oct 02)
• Requesting help with WebAppSec Game Development Joe McCray (Oct 02)
  • Re: Requesting help with WebAppSec Game Development Jeff Williams @ Aspect (Oct 02)
    • Re: Requesting help with WebAppSec Game Development Joe McCray (Oct 02)
  • <Possible follow-ups>
  • RE: Requesting help with WebAppSec Game Development Scovetta, Michael V (Oct 03)
• Stinger Mark Curphey (Oct 02)
• Slides from Blackhat talk Jeremiah Grossman (Oct 03)
• Security and Development Best Practice Guidelines for .NET Framew ork Rosado, Rafael (Rafael) (Oct 08)
  • RE: Security and Development Best Practice Guidelines for .NET Framework Curt Purdy (Oct 09)
• Security Design Patterns Gunnar Peterson (Oct 09)
• RE: Security and Development Best Practice Guidelines for .NET Framework Mark Curphey (Oct 09)
  • <Possible follow-ups>
  • RE: Security and Development Best Practice Guidelines for .NET Framework Amit Klein (Oct 09)
• SOAP protocol analyzer Olivier G. Gaumond (Oct 09)
  • <Possible follow-ups>
  • Re: SOAP protocol analyzer Sylvain Maret (Oct 10)
• Application Security Assessment Methods appsec (Oct 12)
  • Re: Application Security Assessment Methods Brian G. (Oct 12)
  • <Possible follow-ups>
  • RE: Application Security Assessment Methods Mehler, Robert (Oct 13)
• Handling of arbitrary content in analysis tools (WebScarab) Was R E: SOAP protocol analyzer Dawes, Rogan (ZA - Johannesburg) (Oct 13)
  • Re: Handling of arbitrary content in analysis tools (WebScarab) Was RE: SOAP protocol analyzer Jeff Williams @ Aspect (Oct 16)
• Web App URL Scanner Jimi Thompson (Oct 14)
  • RE: Web App URL Scanner roshen.chandran (Oct 14)
  • Re: Web App URL Scanner Jon Hart (Oct 14)
  • RE: Web App URL Scanner Lluis Mora (Oct 17)
    • RE: Web App URL Scanner Jimi Thompson (Oct 17)
  • <Possible follow-ups>
  • RE: Web App URL Scanner Mark Parter (Oct 14)
    • RE: Web App URL Scanner Brian Pomeroy (Oct 14)
  • RE: Web App URL Scanner Dawes, Rogan (ZA - Johannesburg) (Oct 14)
• Securing Outlook Web Access (OWA) pierre-luc.levasseur () laposte net (Oct 14)
  • <Possible follow-ups>
  • RE: Securing Outlook Web Access (OWA) Nick Duda (Oct 14)
• Web start security Guruprasad Ramarao (Oct 15)
  • Re: Web start security Greg Steuck (Oct 16)
• XML DTD entity blowup Ramirez, Manuel N (EM, DDEMESIS) (Oct 16)
  • Re: XML DTD entity blowup Kurt Seifried (Oct 17)
• Online "Passive" Info Gathering Tools appsec (Oct 17)
• Advanced XSS paper and semi-new attack Gavin Zuchlinski (Oct 18)
  • <Possible follow-ups>
  • Re: Advanced XSS paper and semi-new attack Härnhammar , Ulf (Oct 20)
  • Re: Advanced XSS paper and semi-new attack Härnhammar , Ulf (Oct 20)
• [ANNOUNCE] mod_security 1.7 released Ivan Ristic (Oct 18)
• Paros v3.0.2 for web application security assessment contact (Oct 20)
• Oracle Forms Security Resources P8 (Oct 22)
• OASIS WAS Update Mark Curphey (Oct 22)
• Open Source Web Security Gateway Article at Security Focus Mark Curphey (Oct 23)
• PHP session management Gavin Zuchlinski (Oct 26)
  • Re: PHP session management Matt Rohrer (Oct 26)
  • Re: PHP session management Tommy Gildseth (Oct 26)
    • Re: PHP session management Gavin Zuchlinski (Oct 26)
      • Re: PHP session management Hokkaido (Oct 27)
    • Re: PHP session management Gavin Zuchlinski (Oct 27)
  • Re: PHP session management Boris Penck (Oct 27)
    • Re: PHP session management weigelt (Oct 28)
      • Re: PHP session management Ivan Ristic (Oct 28)
  • <Possible follow-ups>
  • RE: PHP session management Tyler Larson (Oct 27)
• Amdocs Clarify CRM Vulnerabilities P8 (Oct 27)
• Paros v3.0.2b released (bug fix only) contact (Oct 27)
• WebScarab Dawes, Rogan (ZA - Johannesburg) (Oct 28)
• PHP Finding SQL Injection Holes James Mitchell (Oct 30)
  • <Possible follow-ups>
  • RE: PHP Finding SQL Injection Holes Wirges, Matthew L. (Oct 30)
    • Re: PHP Finding SQL Injection Holes James Mitchell (Oct 30)
  • RE: PHP Finding SQL Injection Holes Wirges, Matthew L. (Oct 30)
• Black Hat Briefings Announcement Jeff Moss (Oct 30)
• CanSecWest/core04 Call For Papers Dragos Ruiu (Oct 30)
• Security issues with Asp.Net in Shared Hosting Environments Dinis Cruz (Oct 30)
  • Re: Security issues with Asp.Net in Shared Hosting Environments Mark Burnett (Nov 01)
    • RE: Security issues with Asp.Net in Shared Hosting Environments Dinis Cruz (Nov 03)
      • RE: Security issues with Asp.Net in Shared Hosting Environments Mark Burnett (Nov 03)
• mod_security rule database Ivan Ristic (Oct 31)
  • Re: mod_security rule database NightHawk (Oct 31)
• Webappsec List Moderation during November Mark Curphey (Nov 01)
• ORACLE SQL Injection Question Mike Rauch (Nov 03)
  • Re: ORACLE SQL Injection Question Cesar (Nov 04)
  • <Possible follow-ups>
  • Re: ORACLE SQL Injection Question Kenneth Duran (Nov 04)
  • RE: ORACLE SQL Injection Question Pitts, Christopher C. (Nov 04)
• htaccess with apache Hans Mueller (Nov 04)
  • Re: htaccess with apache David Precious (Nov 04)
  • Re: htaccess with apache Graham Lally (Nov 04)
    • Re: htaccess with apache Tim Greer (Nov 04)
      • Re: htaccess with apache A.D.Douma (Nov 04)
      • Re: htaccess with apache Tim Greer (Nov 04)
      • Re: htaccess with apache Sverre H. Huseby (Nov 04)
      • Re: htaccess with apache Tim Tompkins (Nov 04)
      • Re: htaccess with apache Lucas Holt (Nov 04)
      • Re: htaccess with apache A.D.Douma (Nov 05)
      • Re: htaccess with apache Graham Lally (Nov 04)
      • Re: htaccess with apache Tim Greer (Nov 04)
      • Re: htaccess with apache António Vasconcelos (Nov 05)
      • Re: htaccess with apache Tim Greer (Nov 05)
      • Re: htaccess with apache António Vasconcelos (Nov 06)
      • Re: htaccess with apache Tim Greer (Nov 06)
      • Re: htaccess with apache António Vasconcelos (Nov 11)
      • Re: htaccess with apache Tim Greer (Nov 11)
      • Re: htaccess with apache Tim Greer (Nov 11)
  • Re: htaccess with apache Vladimir Danilyuk (Nov 04)
  • Re: htaccess with apache Tim Greer (Nov 04)
  • Re: htaccess with apache Peter Conrad (Nov 04)
  • Re: htaccess with apache Lucas Holt (Nov 04)
  • Re: htaccess with apache Cameron Green (Nov 04)
  • <Possible follow-ups>
  • RE: htaccess with apache Anonymous Sender (Nov 04)
  • RE: htaccess with apache Maxim Kostioukov (Nov 04)
  • RE: htaccess with apache MTeixeira (Nov 05)
    • RE: htaccess with apache Tim Greer (Nov 05)
    • RE: htaccess with apache Dinis Cruz (Nov 11)
      • RE: htaccess with apache Tim Greer (Nov 11)
• Macromedia ColdFusion in a shared hosting environment Bryan Murphy (Nov 04)
• ABC for input validation paper (beta version) Calderon, Juan C (EM, DDEMESIS) (Nov 04)
  • <Possible follow-ups>
  • RE: ABC for input validation paper (beta version) Calderon, Juan Carlos (DDEMESIS) (Nov 11)
• Paper: The Anatomy of Cross Site Scripting Gavin Zuchlinski (Nov 06)
• ISAPI Mappings on IIS? Mark G. Spencer (Nov 06)
  • <Possible follow-ups>
  • Re: ISAPI Mappings on IIS? Mark G. Spencer (Nov 11)
• Training for web developers? Mark G. Spencer (Nov 11)
  • Re: Training for web developers? Jeff Williams @ Aspect (Nov 13)
  • <Possible follow-ups>
  • RE: Training for web developers? von Dadelszen, Nicholas (NZ - Wellington) (Nov 11)
    • RE: Training for web developers? Arian J. Evans (Nov 13)
    • RE: Training for web developers? Larry Smith (Nov 13)
  • RE: Training for web developers? Scovetta, Michael V (Nov 13)
• looking for advanced web hacking course Pheebee Buffe (Nov 11)
  • Re: looking for advanced web hacking course Tim Greer (Nov 11)
    • RE: looking for advanced web hacking course Glyn Geoghegan (Nov 13)
      • RE: looking for advanced web hacking course Tim Greer (Nov 13)
    • Re: looking for advanced web hacking course Bill Pennington (Nov 13)
      • Re: looking for advanced web hacking course Tim Greer (Nov 13)
    • Re: looking for advanced web hacking course The Crocodile (Nov 13)
  • Re: looking for advanced web hacking course minime (Nov 13)
    • Re: looking for advanced web hacking course A.D.Douma (Nov 13)
      • Re: looking for advanced web hacking course Mr. Rufus Faloofus (Nov 14)
      • Re: looking for advanced web hacking course Jarmo Joensuu (Nov 14)
  • <Possible follow-ups>
  • RE: looking for advanced web hacking course latte1 (Nov 13)
  • RE: looking for advanced web hacking course Cuthbert, Daniel (Nov 13)
  • RE: looking for advanced web hacking course Filip Maertens (Nov 13)
  • RE: looking for advanced web hacking course Zhou, Joe [CC] (Nov 13)
  • RE: looking for advanced web hacking course Keifer, Trey (Nov 13)
  • RE: looking for advanced web hacking course Filip Maertens (Nov 19)
• Hacking web apps Sekurity Wizard (Nov 14)
• Anyone have some basic security tips for PHP-programmers? Matthews, Chris (Nov 14)
  • RE: Anyone have some basic security tips for PHP-programmers? arek (Nov 18)
    • Re: Anyone have some basic security tips for PHP-programmers? Tommy Gildseth (Nov 20)
      • RE: Anyone have some basic security tips for PHP-programmers? arek (Nov 20)
    • Re: Anyone have some basic security tips for PHP-programmers? James Mitchell (Nov 20)
      • RE: Anyone have some basic security tips for PHP-programmers? arek (Nov 20)
      • Re: Anyone have some basic security tips for PHP-programmers? James Mitchell (Nov 22)
  • <Possible follow-ups>
  • Re: Anyone have some basic security tips for PHP-programmers? DownBload (Nov 18)
  • RE: Anyone have some basic security tips for PHP-programmers? Keifer, Trey (Nov 18)
  • Re: Anyone have some basic security tips for PHP-programmers? tim (Nov 22)
    • Re: Anyone have some basic security tips for PHP-programmers? Härnhammar , Ulf (Nov 22)
      • Re: Anyone have some basic security tips for PHP-programmers? Tommy Gildseth (Nov 23)
      • Re: Anyone have some basic security tips for PHP-programmers? Härnhammar , Ulf (Nov 23)
  • RE: Anyone have some basic security tips for PHP-programmers? Herbold, John W. (Nov 22)
  • RE: Anyone have some basic security tips for PHP-programmers? exon (Nov 24)
  • RE: Anyone have some basic security tips for PHP-programmers? Herbold, John W. (Nov 24)
    • RE: Anyone have some basic security tips for PHP-programmers? Härnhammar , Ulf (Nov 24)
      • Re: Anyone have some basic security tips for PHP-programmers? Andreas (Nov 25)
      • Re: Anyone have some basic security tips for PHP-programmers? Härnhammar , Ulf (Nov 25)
      • Re: Anyone have some basic security tips for PHP-programmers? Sverre H. Huseby (Nov 25)
• New WebScarab release Dawes, Rogan (ZA - Johannesburg) (Nov 18)
• SOAP Web Services Attack White Paper SPI Labs (Nov 18)
• Paros v3.0.2c released contact (Nov 22)
• Cost to fix bugs pre-production Mark Curphey (Nov 25)
  • Re: Cost to fix bugs pre-production Gary Gwin (Nov 25)
  • Re: Cost to fix bugs pre-production Ivan Ristic (Nov 25)
  • Re: Cost to fix bugs pre-production Peter Wood (Nov 26)
  • RE: Cost to fix bugs pre-production Glyn (Nov 26)
  • <Possible follow-ups>
  • RE: Cost to fix bugs pre-production Eugene Chuvyrov (Nov 25)
• Fwd: Re: Intresting case of SQL Injection George W. Capehart (Dec 06)
• QUESTION....DOES THIS CONSIDER TO BE A BUG? Rafel Ivgi (Dec 09)
  • Re: QUESTION....DOES THIS CONSIDER TO BE A BUG? Bill Pennington (Dec 09)
• How to handle "special characters" Sekurity Wizard (Dec 10)
  • Re: How to handle "special characters" Clint Bodungen (Dec 10)
  • RE: How to handle "special characters" Tony Langley (Dec 10)
    • RE: How to handle "special characters" sparkes (Dec 11)
      • RE: How to handle "special characters" riptide (Dec 11)
  • <Possible follow-ups>
  • RE: How to handle "special characters" Brown, James F. (Dec 11)
  • RE: How to handle "special characters" appsec (Dec 11)
    • RE: How to handle "special characters" Sachin Hamirwasia (Dec 14)
      • RE: How to handle "special characters" Ghita Serban (Dec 15)
      • Re: RE: How to handle "special characters" .Saphyr (Dec 15)
      • Re: How to handle "special characters" Tobias Mathes (Dec 15)
  • RE: How to handle "special characters" Keifer, Trey (Dec 11)
    • RE: How to handle "special characters" Ghita Serban (Dec 12)
  • RE: How to handle "special characters" Tom Stowell (Dec 13)
    • Re: How to handle "special characters" T.J. (Dec 13)
      • Re: How to handle "special characters" Devdas Bhagat (Dec 21)
• CanSecWest/core04 Really Really Last CFP Dragos Ruiu (Dec 17)
• Paros v3.0.3 released contact (Dec 18)
• Happy Christmas, Peaceful New Year and Administrativia Mark Curphey (Dec 21)
• SSL Question bob (Dec 22)
  • Re: SSL Question RSnake (Dec 22)
  • <Possible follow-ups>
  • Re: SSL Question Tom Stowell (Dec 22)
• Good articles on Java vs .NET security Mark Curphey (Dec 31)
• Team Software Process and Security Mark Curphey (Dec 31)
• [ Q ] URL obfuscation tools/scripts shawnmer (Dec 31)

Previous period

Next period