WebApp Sec: by thread

• RSS Feed
•  About List
•  All Lists

Previous period

Next period

431 messages starting Jan 01 06 and ending Mar 31 06
Date index | Thread index | Author index

• Re: Dubious -- New firefox master password cracker and firefox signon password decryptor...!!! mike (Jan 01)
• MD5 math question Jeff Robertson (Jan 03)
  • Re: MD5 math question Chris Varenhorst (Jan 03)
  • Re: MD5 math question Tim (Jan 03)
  • RE: MD5 math question Vipul Kumra (Jan 04)
  • Memo: Re: MD5 math question tim . m . james (Jan 04)
  • Re: MD5 math question Charles Miller (Jan 05)
    • Re: MD5 math question exon (Jan 06)
      • Re: MD5 math question Tim (Jan 06)
      • Re: MD5 math question exon (Jan 06)
      • Re: MD5 math question Tim (Jan 07)
      • Re: MD5 math question exon (Jan 07)
      • Re: MD5 math question Tim (Jan 07)
      • Re: MD5 math question Charles Miller (Jan 06)
  • <Possible follow-ups>
  • FW: RE: MD5 math question Vipul Kumra (Jan 04)
    • Re: FW: RE: MD5 math question Chuck (Jan 06)
  • RE: MD5 math question Navroz Shariff (Jan 04)
  • RE: MD5 math question Jeff Robertson (Jan 07)
• Mac OS X packages of proxy tools Stephen de Vries (Jan 06)
• Memo: Re: MD5 math question tim . m . james (Jan 06)
• Re: Securing Tomcat oc . rynning . no (Jan 06)
  • Re: Securing Tomcat Stephen de Vries (Jan 09)
• Felony For Refreshing A Web Page zeno (Jan 06)
  • Re: Felony For Refreshing A Web Page exon (Jan 07)
    • Re: Felony For Refreshing A Web Page Todd Ellner (Jan 07)
      • Re: Felony For Refreshing A Web Page exon (Jan 07)
    • RE: Felony For Refreshing A Web Page Ebeling, Jr., Herman Frederick (Jan 07)
  • RE: Felony For Refreshing A Web Page Ebeling, Jr., Herman Frederick (Jan 07)
  • Re: Felony For Refreshing A Web Page Charles Miller (Jan 08)
    • Re: Felony For Refreshing A Web Page lakewood1 () copper net (Jan 09)
  • <Possible follow-ups>
  • Re: Felony For Refreshing A Web Page Jason Coombs (Jan 07)
    • RE: Felony For Refreshing A Web Page Ebeling, Jr., Herman Frederick (Jan 08)
• WebAppSec appends advertisements to mailing list messages?! Amit Klein (AKsecurity) (Jan 06)
  • Re: WebAppSec appends advertisements to mailing list messages?! Peter Conrad (Jan 10)
  • <Possible follow-ups>
  • RE: WebAppSec appends advertisements to mailing list messages?! Ory Segal (Jan 10)
    • Re: WebAppSec appends advertisements to mailing list messages?! Peter Conrad (Jan 10)
      • Administrivia: Adverts Andrew van der Stock (Jan 10)
    • RE: WebAppSec appends advertisements to mailing list messages?! Clement Dupuis (Jan 10)
  • RE: WebAppSec appends advertisements to mailing list messages?! Jason Gregson (Jan 10)
• Please Review a Diffie Hellman diagram Saqib Ali (Jan 07)
  • Re: Please Review a Diffie Hellman diagram Jason Murray (Jan 08)
  • Message not available
    • Re: Please Review a Diffie Hellman diagram Sanjay Rawat (Jan 09)
  • <Possible follow-ups>
  • RE: Please Review a Diffie Hellman diagram Mrinal Biswas (Jan 09)
    • Message not available
      • RE: Please Review a Diffie Hellman diagram Sanjay Rawat (Jan 09)
    • Re: Please Review a Diffie Hellman diagram Saqib Ali (Jan 10)
  • RE: Please Review a Diffie Hellman diagram Hall, Carl (Jan 09)
    • Re: Please Review a Diffie Hellman diagram Saqib Ali (Jan 10)
  • RE: Please Review a Diffie Hellman diagram Hall, Carl (Jan 10)
    • Re: Please Review a Diffie Hellman diagram Saqib Ali (Jan 14)
• Thick Clients Gone Wrong zeno (Jan 07)
• Web App Traps (custom IDS) Meder Kydyraliev (Jan 08)
  • <Possible follow-ups>
  • RE: Web App Traps (custom IDS) Damhuis Anton (Jan 09)
    • Re: Web App Traps (custom IDS) Meder Kydyraliev (Jan 09)
    • Re: Web App Traps (custom IDS) Jason (Jan 09)
• Awstats and XMLRPC for PHP attacks Mark Ryan del Moral Talabis (Jan 08)
• Defacing Groups using PHP Include Attacks as Vector bugtraq (Jan 09)
• applet security test . future (Jan 09)
  • RE: applet security Andrew Chong (Jan 09)
    • Re: applet security Dean H. Saxe (Jan 09)
  • RE: applet security Richard M. Smith (Jan 10)
  • <Possible follow-ups>
  • RE: applet security Jeff Robertson (Jan 09)
  • Re: applet security test . future (Jan 11)
    • Re: applet security Michael Silk (Jan 11)
  • Re: Re: applet security test . future (Jan 12)
    • Re: applet security Steve Barnet (Jan 12)
    • RE: Re: applet security Andrew Chong (Jan 12)
  • Re: Re: applet security test . future (Jan 12)
• SF article announcement: Patching a broken Windows Andrew van der Stock (Jan 09)
• XSS online tester Matthieu (Jan 11)
  • Re: XSS online tester Sandeep Shetty (Jan 13)
    • Re: XSS online tester Matthieu (Jan 12)
• PayPal Phishing Site Exploits Google XSS Vulnerability Paul Laudanski (Jan 11)
  • Re: PayPal Phishing Site Exploits Google XSS Vulnerability Stelian Ene (Jan 11)
    • Re: PayPal Phishing Site Exploits Google XSS Vulnerability Paul Laudanski (Jan 11)
  • <Possible follow-ups>
  • Re: PayPal Phishing Site Exploits Google XSS Vulnerability shwaya (Jan 12)
• RE: [WEB SECURITY] Web Hacking Incident: PayPal Phishing Site Exploits Google XSS Vulnerability RSnake (Jan 11)
  • RE: [WEB SECURITY] Web Hacking Incident: PayPal Phishing Site Exploits Google XSS Vulnerability dpw (Jan 11)
    • RE: [WEB SECURITY] Web Hacking Incident: PayPal Phishing Site Exploits Google XSS Vulnerability Paul Laudanski (Jan 11)
    • Re: Referer/302 behavior [WEB SECURITY] Web Hacking... PayPal Phishing ... Google redirect Peter Watkins (Jan 31)
• Administrivia: Good news, everyone. Adverts are now distinct Andrew van der Stock (Jan 11)
• net-square tools release announcement:MSNPawn Hemil (Jan 12)
• Call For Papers: 2006 OWASP AppSec Europe Conference Dave Wichers (Jan 13)
  • <Possible follow-ups>
  • Call For Papers: 2006 OWASP AppSec Europe Conference Frank Piessens (Feb 08)
• Preliminary Announcement: 2006 European OWASP AppSec Conference - May 30-31, 2006 near Brussels Dave Wichers (Jan 14)
• #include file tag in HTML: possible issues? Giuseppe DELL'ERBA (Jan 14)
  • Re: #include file tag in HTML: possible issues? Aman Raheja (Jan 15)
    • RE: #include file tag in HTML: possible issues? Giuseppe DELL'ERBA (Jan 17)
  • Re: #include file tag in HTML: possible issues? Jon Hart (Jan 17)
  • <Possible follow-ups>
  • RE: #include file tag in HTML: possible issues? Giuseppe DELL'ERBA (Jan 20)
• EUSecWest papers and CanSecWest CFP Dragos Ruiu (Jan 15)
• Mambo File Inclusion Attacks Mark Ryan del Moral Talabis (Jan 15)
  • Re: Mambo File Inclusion Attacks Christopher Kunz (Jan 15)
    • Re: Mambo File Inclusion Attacks Mark Ryan del Moral Talabis (Jan 17)
• Hacking With The Google Search Engine Paul Laudanski (Jan 15)
  • Re: [DCC SPAM] Hacking With The Google Search Engine Lance James (Jan 17)
    • Re: [DCC SPAM] Hacking With The Google Search Engine Paul Laudanski (Jan 19)
  • <Possible follow-ups>
  • RE: Hacking With The Google Search Engine Matt Fisher (Jan 17)
    • Re: Hacking With The Google Search Engine Jean-Jacques Halans (Jan 17)
      • Re: Hacking With The Google Search Engine Ryan McGeehan (Jan 17)
• Paros 3.2.9 release contact (Jan 15)
• Announcement: The Web Application Firewall Evaluation Criteria v1 Released contact (Jan 17)
• Re: Re: notice: mambo scanner dontbugme (Jan 17)
• Article: "Security Testing Demystified" Debasis Mohanty (Jan 18)
• Suggestion: email anti-spoof measure on web site ma . huijuan (Jan 18)
  • <Possible follow-ups>
  • Re: Suggestion: email anti-spoof measure on web site mike (Jan 19)
    • Re: Suggestion: email anti-spoof measure on web site Georgi Alexandrov (Jan 23)
  • Re: Re: Suggestion: email anti-spoof measure on web site ma . huijuan (Jan 19)
  • Re: Re: Re: Suggestion: email anti-spoof measure on web site mike (Jan 20)
• MSIE session cookies John Bond (Jan 18)
  • RE: MSIE session cookies Richard M. Smith (Jan 19)
    • Re: MSIE session cookies John Bond (Jan 19)
      • Re: MSIE session cookies Scott Hamm (Jan 19)
      • Re: MSIE session cookies John Bond (Jan 19)
      • RE: MSIE session cookies Richard M. Smith (Jan 19)
      • Re: MSIE session cookies John Bond (Jan 19)
      • RE: MSIE session cookies Richard M. Smith (Jan 19)
      • Re: MSIE session cookies John Bond (Jan 19)
      • RE: MSIE session cookies Richard M. Smith (Jan 19)
  • Re: MSIE session cookies Jean-Jacques Halans (Jan 19)
  • Re: MSIE session cookies Aman Raheja (Jan 21)
  • <Possible follow-ups>
  • RE: MSIE session cookies Zhou, Joe [HR] (Jan 19)
  • RE: MSIE session cookies Sebastien Deleersnyder (Jan 19)
  • RE: MSIE session cookies Labe Grzegorz DRS-BSI Centrala (Jan 19)
  • RE: MSIE session cookies veille_audit (Jan 19)
  • RE: MSIE session cookies Zhou, Joe [HR] (Jan 21)
    • Message not available
      • Re: MSIE session cookies John Bond (Jan 20)
• Fwd: SF new column announcement: How not to respond to a security advisory Andrew van der Stock (Jan 18)
  • [SPAM] Re: SF new column announcement: How not to respond to a security advisory Kurt Seifried (Jan 19)
    • Re: [SPAM] Re: SF new column announcement: How not to respond to a security advisory Andrew van der Stock (Jan 19)
      • Re: [SPAM] Re: SF new column announcement: How not to respond to a security advisory Byron Sonne (Jan 19)
      • Re: [SPAM] Re: SF new column announcement: How not to respond to a security advisory Byron Sonne (Jan 19)
      • [SPAM] Re: [SPAM] Re: SF new column announcement: How not to respond to a security advisory Kurt Seifried (Jan 19)
      • Re: Re: [SPAM] Re: SF new column announcement: How not to respond to a security advisory Markus Vervier (Jan 21)
• Administrivia: Faulty censorware and faulty anti-virus software Andrew van der Stock (Jan 19)
• HITBSecConf2005 Videos Released ! Praburaajan (Jan 19)
• Web Application Security Contest - New Procedure sthalkidis (Jan 20)
  • Re: Web Application Security Contest - New Procedure Dean H. Saxe (Jan 20)
  • <Possible follow-ups>
  • Re: Re: Web Application Security Contest - New Procedure sthalkidis (Jan 21)
  • Re: Re: Re: Web Application Security Contest - New Procedure sthalkidis (Jan 22)
  • Re: Re: Re: Re: Web Application Security Contest - New Procedure sthalkidis (Jan 24)
• sql comment in access Robin Wood (Jan 20)
  • Re: sql comment in access John Bond (Jan 23)
    • Message not available
      • Re: sql comment in access John Bond (Jan 23)
  • <Possible follow-ups>
  • sql comment in access Robin Wood (Jan 21)
    • Re: sql comment in access Chuck (Jan 22)
  • RE: sql comment in access Mark Atherton (Jan 23)
    • Re: sql comment in access Robin Wood (Jan 23)
• benchmarking the web app scanners thomas.jones (Jan 20)
  • Message not available
    • Re: benchmarking the web app scanners Dinis Cruz (Jan 23)
• Security Patterns Application Security Contest sthalkidis (Jan 21)
• (SiteGenerator) re: benchmarking the web app scanners Dinis Cruz (Jan 22)
• Request for beta-testers: WebScarab Rogan Dawes (Jan 23)
• Update on: 2006 European OWASP AppSec Conference - May 30-31, 2006 near Brussels Dave Wichers (Jan 23)
• Technical Note by Amit Klein: "XST Strikes Back" Amit Klein (AKsecurity) (Jan 24)
  • Re: Technical Note by Amit Klein: "XST Strikes Back" Ivan Ristic (Jan 26)
• Call For Paper - SyScan'06 Singapore organiser () syscan org (Jan 24)
• Oracle in war of words with security researcher bugtraq (Jan 26)
  • Re: Oracle in war of words with security researcher robert (Jan 27)
    • Re: Oracle in war of words with security researcher Byron Sonne (Jan 27)
      • Re: [WEB SECURITY] Re: Oracle in war of words with security researcher tlmacgi (Jan 27)
      • Re: [WEB SECURITY] Re: Oracle in war of words with security researcher Valkyrie (Jan 27)
      • Re: [WEB SECURITY] Re: Oracle in war of words with security researcher Andrew van der Stock (Jan 27)
      • Re: [WEB SECURITY] Re: Oracle in war of words with security researcher Paul Schmehl (Jan 27)
• Cross Site Cooking Michal Zalewski (Jan 28)
  • <Possible follow-ups>
  • RE: Cross Site Cooking Amit Klein (AKsecurity) (Jan 29)
    • RE: Cross Site Cooking Michal Zalewski (Jan 30)
    • Re: Cross Site Cooking Aman Raheja (Jan 31)
      • Re: Cross Site Cooking Michal Zalewski (Feb 02)
  • Re: Cross Site Cooking john-secfocus (Jan 31)
    • Re: Cross Site Cooking Erwan Legrand (Jan 31)
    • Re: Cross Site Cooking Michal Zalewski (Jan 31)
  • RE: Cross Site Cooking Evans, Arian (Jan 31)
• PHP based defacing tool usage continue to rise Mark Ryan del Moral Talabis (Jan 30)
  • Re: PHP based defacing tool usage continue to rise Christopher Kunz (Jan 30)
    • Message not available
      • Re: PHP based defacing tool usage continue to rise Zapotek (Jan 30)
      • Re: PHP based defacing tool usage continue to rise Mark Ryan del Moral Talabis (Jan 31)
      • Re: PHP based defacing tool usage continue to rise Christopher Kunz (Feb 03)
  • <Possible follow-ups>
  • Re: Re: PHP based defacing tool usage continue to rise kaskasi (Feb 06)
• OWASP February Meetings Andrew van der Stock (Jan 30)
• (Melbourne, Australia) SecureCon 2006 Andrew van der Stock (Jan 30)
• Who's afraid of Mallory Wolf? Ace123 (Jan 30)
  • Re: Who's afraid of Mallory Wolf? Andrew van der Stock (Jan 30)
  • Re: Who's afraid of Mallory Wolf? Erwan Legrand (Jan 31)
• AMD web forums trojaned by WMF exploit Evans, Arian (Jan 31)
• SF new article announcement - Malicious Malware: attacking the attackers, part 1 Andrew van der Stock (Jan 31)
  • Re: SF new article announcement - Malicious Malware: attacking the attackers, part 1 Steven Rebello (Jan 31)
• Livejournal opens unoffical XSS security challenge Chris Varenhorst (Jan 31)
• Black Hat USA CFP opens, Europe early bird reminder, Federal news Jeff Moss (Feb 02)
• Fwd: SF new article announcement - Malicious Malware: attacking the attackers, part 2 Andrew van der Stock (Feb 02)
• SF new article announcement: Nmap 4.00 with Fyodor Andrew van der Stock (Feb 03)
• VMware moves to free with Server product Saqib Ali (Feb 03)
• Announcement: Domain Contamination By Amit Klein contact (Feb 06)
• Ajax Security Presentation from OWASP Melbourne Feb Meeting Andrew van der Stock (Feb 07)
• A new OWASP project! Vicente Aguilera (Feb 09)
• Creation of OWASP Spain chapter Vicente Aguilera (Feb 09)
• Web Application Security Contest - One week left sthalkidis (Feb 15)
• BlackHat AMS & SQL Injection Evans, Arian (Feb 15)
• Crawl And interpret Flash files tester (Feb 15)
  • Re: Crawl And interpret Flash files Rogan Dawes (Feb 15)
    • RE: Crawl And interpret Flash files arian.evans (Feb 16)
      • RE: Crawl And interpret Flash files redux arian.evans (Feb 18)
      • Re: Crawl And interpret Flash files redux dp (Feb 20)
      • RE: Crawl And interpret Flash files redux arian.evans (Feb 21)
• HttpOnly and J2EE containers Pilon Mntry (Feb 15)
  • <Possible follow-ups>
  • RE: HttpOnly and J2EE containers Jeff Williams (Feb 17)
    • RE: HttpOnly and J2EE containers Pilon Mntry (Feb 20)
• web-based risk management tool in SDLC test . future (Feb 15)
• Official release of SQL Power Injector v1.0 Francois Larouche (Feb 15)
• Paper: Domain contamination by Amit Klein Andrew van der Stock (Feb 16)
• Fwd: SF new column announcement: Privacy and anonymity Andrew van der Stock (Feb 16)
• Firefox, Netcraft Toolbar, and FlashBlock Saqib Ali (Feb 16)
  • Re: Firefox, Netcraft Toolbar, and FlashBlock Pilon Mntry (Feb 16)
    • Re: Firefox, Netcraft Toolbar, and FlashBlock Saqib Ali (Feb 17)
• Tools comparison and evaluation question (AppScan) Serg Belokamen (Feb 16)
  • RE: Tools comparison and evaluation question (AppScan) arian.evans (Feb 17)
  • <Possible follow-ups>
  • RE: Tools comparison and evaluation question (AppScan) Peine,Holger (Feb 17)
    • Re: Tools comparison and evaluation question (AppScan) Lucien Fransman (Feb 17)
      • Re: Tools comparison and evaluation question (AppScan) Serg B. (Feb 17)
  • FW: Tools comparison and evaluation question (AppScan) Burke, Charles (Feb 17)
    • Re: FW: Tools comparison and evaluation question (AppScan) Serg B. (Feb 17)
  • RE: Tools comparison and evaluation question (AppScan) Burke, Charles (Feb 17)
    • Re: Tools comparison and evaluation question (AppScan) Ratna Kumar (Feb 17)
    • RE: Tools comparison and evaluation question (AppScan) Rui Pereira (WCG) (Feb 17)
  • Re: FW: Tools comparison and evaluation question (AppScan) Xyberpix (Feb 17)
    • Re: FW: Tools comparison and evaluation question (AppScan) Peter Wood (Feb 17)
      • RE: FW: Tools comparison and evaluation question (AppScan) David Munge (Feb 17)
  • RE: Tools comparison and evaluation question (AppScan) Xyberpix (Feb 17)
  • RE: Tools comparison and evaluation question (AppScan) King, Stuart (REHQ-LON) (Feb 17)
  • RE: Tools comparison and evaluation question (AppScan) Talwar, Mansi (Feb 17)
  • RE: FW: Tools comparison and evaluation question (AppScan) Brokken, Allen P. (Feb 17)
  • RE: FW: Tools comparison and evaluation question (AppScan) Erwin Geirnaert (Feb 17)
    • RE: (OWASP Web App Tool Project) Tools comparison and evaluation question (AppScan) arian.evans (Feb 18)
  • RE: FW: Tools comparison and evaluation question (AppScan) Joe White (Feb 17)
    • RE: FW: Tools comparison and evaluation question (AppScan) arian.evans (Feb 18)
      • Re: Tools comparison and evaluation question (AppScan) Tommy (Feb 19)
  • Re: RE: Tools comparison and evaluation question (AppScan) mr . dan . friedman (Feb 19)
  • RE: RE: Tools comparison and evaluation question (AppScan) Gavin, Michael (Feb 19)
  • Re: RE: RE: Tools comparison and evaluation question (AppScan) david_allouch (Mar 22)
• BCS Asia 2006 - Call for Papers Jim Geovedi (Feb 17)
• Fortify Source Code Auditing Suite and the like spammailme (Feb 17)
  • Re: Fortify Source Code Auditing Suite and the like Dhruv Soi (Feb 17)
• New OWAP Florida Chapter! owaspflorida (Feb 18)
• Whitepaper by Amit Klein: "HTTP Response Smuggling" Amit Klein (AKsecurity) (Feb 20)
• SF new column announcement: Strict liability for data breaches? Andrew van der Stock (Feb 20)
• Virtual IP addresses Joshua Perrymon (Feb 22)
  • Re: Virtual IP addresses thomas springer (Feb 22)
    • Re: Virtual IP addresses Jon Hart (Feb 22)
      • Re: Virtual IP addresses Hemil (Feb 23)
  • Re: Virtual IP addresses foo (Feb 22)
    • Re: Virtual IP addresses Paul Wong (Feb 23)
  • Re: Virtual IP addresses dp (Feb 22)
• Web Application Security Contest-Winner sthalkidis (Feb 22)
  • Re: Web Application Security Contest-Winner Rusty Bug (Feb 27)
  • Re: Web Application Security Contest-Winner Alice Bryson (Feb 28)
• DEF CON 14 is now in effect! The Call for Papers is open. Jeff Moss (Feb 22)
• Event Speaker Pete Herzog (Feb 23)
• [Announcement] Security Certification for Applications Roshen Chandran (Feb 26)
  • Re: [Announcement] Security Certification for Applications Peter Parker (Feb 27)
• London next week for some Naked Application Security ? Mark Curphey (Feb 28)
• Technical Note by Amit Klein: "Path Insecurity" Amit Klein (AKsecurity) (Mar 01)
• OWASP chapter meeting Dublin 20th March. Eoin (Mar 01)
• Update on OWASP London Next Week Mark Curphey (Mar 01)
• Fwd: SF new column announcement: The big DRM mistake Andrew van der Stock (Mar 01)
• Consolidated OWASP Meetings for March Andrew van der Stock (Mar 02)
• Crimeware coverage by Scientific American Saqib Ali (Mar 03)
  • OWASP AppSec Europe 2006 Agenda Posted Dave Wichers (Mar 05)
• U.S. Objects to Snort Purchase by Israel-Based Check Point bugtraq (Mar 03)
• HITBSecConf2006 - Malaysia: Call for Papers Praburaajan (Mar 04)
• SyScan'06 Call For Papers organiser () syscan org (Mar 05)
• Announcement: WASC Threat Classification in German contact (Mar 06)
• SF new column annoucement: The value of vulnerabilities Andrew van der Stock (Mar 07)
• CanSecWest/core06 Vancouver April 3-7 Dragos Ruiu (Mar 08)
• Purple Paper: Exegesis Of Virtual Hosts Hacking pagvac (Mar 09)
• get network user name John Bond (Mar 09)
  • Re: get network user name Josh (Mar 09)
    • Re: get network user name Adam Tuliper (Mar 09)
      • Re: get network user name Josh (Mar 09)
    • RE: get network user name Auri Rahimzadeh (Mar 09)
  • <Possible follow-ups>
  • Re: get network user name John Bond (Mar 10)
    • Re: get network user name Josh (Mar 11)
• FW: Publication of Vulnerabilities in Vendor Code Brokken, Allen P. (Mar 10)
  • Re: FW: Publication of Vulnerabilities in Vendor Code D . Snezhkov (Mar 10)
    • RE: FW: Publication of Vulnerabilities in Vendor Code Sasha Romanosky (Mar 11)
  • Re: FW: Publication of Vulnerabilities in Vendor Code Kyle Maxwell (Mar 10)
  • Re: FW: Publication of Vulnerabilities in Vendor Code leighm (Mar 10)
• XSS testing & general webapp testing on my hosted apps arian.evans (Mar 10)
• Web Application Security Contest - Vulnerabilities sthalkidis (Mar 14)
• A study in Application Based Intrusion Detection kp (Mar 15)
  • Re: A study in Application Based Intrusion Detection dp (Mar 15)
  • <Possible follow-ups>
  • Re: A study in Application Based Intrusion Detection kp (Mar 15)
• HTTP proxy/redirector to a unique virtual host .... Alberto Paris (Mar 15)
  • Re: HTTP proxy/redirector to a unique virtual host .... Luciano Miguel Ferreira Rocha (Mar 16)
  • <Possible follow-ups>
  • Re: HTTP proxy/redirector to a unique virtual host .... davidribyrne (Mar 16)
  • RE: HTTP proxy/redirector to a unique virtual host .... Alan Murphy (Mar 16)
    • Re: HTTP proxy/redirector to a unique virtual host .... Thomas Chiverton (Mar 16)
  • Re: HTTP proxy/redirector to a unique virtual host .... John . T . Burkhart (Mar 16)
  • RE: HTTP proxy/redirector to a unique virtual host .... Jeff Gercken (Mar 17)
• SQL Injecting RFID Readers bugtraq (Mar 16)
• Marking Session IDs as Secure in IIS 6.0 steven_debough (Mar 16)
• Call for Participation: HOPE#6, July 21-23 Dominick LaTrappe (Mar 17)
• How to Create Secure Web Applications with Struts bugtraq (Mar 19)
  • Re: [WEB SECURITY] How to Create Secure Web Applications with Struts Stephen de Vries (Mar 20)
    • Re: [WEB SECURITY] How to Create Secure Web Applications with Struts Pilon Mntry (Mar 21)
      • A Modular Approach to Data Validation in Web Applications Stephen de Vries (Mar 27)
    • Re: [WEB SECURITY] How to Create Secure Web Applications with Struts George Capehart (Mar 21)
      • XST Frederic Charpentier (Mar 21)
      • Re: [WEB SECURITY] XST Amit Klein (AKsecurity) (Mar 21)
• Redirection obfuscation in FF and NS RSnake (Mar 20)
  • Re: Redirection obfuscation in FF and NS Saqib Ali (Mar 20)
    • Re: Redirection obfuscation in FF and NS RSnake (Mar 20)
      • Re: Redirection obfuscation in FF and NS Saqib Ali (Mar 20)
• Interesting University Security Weakness Schmidt, Albert E (Mar 20)
  • Message not available
    • Re: [WEB SECURITY] Free tool to analyse and post http request Jamie Lawrence (Mar 23)
      • Re: [WEB SECURITY] Free tool to analyse and post http request yeesan wong (Mar 24)
• RE: [WEB SECURITY] How to Create Secure Web Applications with Struts Andre Maisonneuve (Mar 21)
  • <Possible follow-ups>
  • Re: [WEB SECURITY] How to Create Secure Web Applications with Struts Pilon Mntry (Mar 21)
    • Re: [WEB SECURITY] How to Create Secure Web Applications with Struts Stephen de Vries (Mar 21)
  • Re: [WEB SECURITY] How to Create Secure Web Applications with Struts Pilon Mntry (Mar 22)
  • RE: [WEB SECURITY] How to Create Secure Web Applications with Struts PPowenski (Mar 22)
• ERRATA: Re: [WEB SECURITY] XST Amit Klein (AKsecurity) (Mar 21)
• Reminder: 2006 European OWASP AppSec Conference - May 30-31, 2006 near Brussels Dave Wichers (Mar 21)
• w3wp remote DoS Debasis Mohanty (Mar 22)
• RE: [WEB SECURITY] How to Create Secure Web Applications with Struts JAMES N. BARBIERI (Mar 22)
• Web attacks, phpBB mass-hack and the PHP Honeypot Project Mark Ryan del Moral Talabis (Mar 22)
• RE: [WEB SECURITY] How to Create Secure Web Applications withStruts Andre Maisonneuve (Mar 22)
• Server Identification Andres Molinetti (Mar 23)
  • Re: [WEB SECURITY] Server Identification Bryan Murphy (Mar 23)
  • RE: [WEB SECURITY] Server Identification Deb Hale (Mar 23)
  • Re: Server Identification Kevin Johnson (Mar 24)
  • <Possible follow-ups>
  • RE: Server Identification Tommy Baker (Mar 23)
• common practices of cleaning user input Anthony Ettinger (Mar 23)
• RE: [WEB SECURITY] Server Identification Matt Schmotzer (Mar 23)
• Offtopic: Guidelines for Safe Internet brownsing for minors Saqib Ali (Mar 24)
  • <Possible follow-ups>
  • Re: Offtopic: Guidelines for Safe Internet brownsing for minors Kris Kahn (Mar 25)
• 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Dinis Cruz (Mar 25)
  • RE: 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Jeff Williams (Mar 25)
    • Re: [Owasp-dotnet] RE: 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Dinis Cruz (Mar 27)
      • Re: [Full-disclosure] Re: [Owasp-dotnet] RE: 4 Questions: Latest IEvulnerability, Firefox vs IE security, User vs Admin risk profile,and browsers coded in 100% Managed Verifiable code Joe Ciechanowski (Mar 31)
      • Re: [Full-disclosure] Re: [Owasp-dotnet] RE: 4 Questions: Latest IEvulnerability, Firefox vs IE security, User vs Admin risk profile,and browsers coded in 100% Managed Verifiable code Saqib Ali (Mar 31)
  • Re: [Full-disclosure] 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Valdis . Kletnieks (Mar 25)
  • Re: [Full-disclosure] 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Brian Eaton (Mar 25)
    • Re: [Full-disclosure] 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Pilon Mntry (Mar 27)
      • Re: [Full-disclosure] 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Brian Eaton (Mar 27)
      • Re: [Full-disclosure] 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Pavel Kankovsky (Mar 27)
      • Re: [Full-disclosure] 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Brian Eaton (Mar 27)
      • Re: [Full-disclosure] 4 Questions: Latest IE vulnerability, Firefoxvs IE security, User vs Admin risk profile, and browsers coded in 100%Managed Verifiable code Pavel Kankovsky (Mar 28)
      • Re: [Full-disclosure] 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Pavel Kankovsky (Mar 28)
      • Re: [Full-disclosure] 4 Questions: Latest IE vulnerability,Firefox vs IE security, User vs Admin risk profile,and browsers coded in 100% Managed Verifiable code Brian Eaton (Mar 29)
      • Re: [Full-disclosure] 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Brian Eaton (Mar 29)
  • Re: [Full-disclosure] 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Pavel Kankovsky (Mar 27)
    • Re: [Full-disclosure] 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Brian Eaton (Mar 27)
      • Re: [Full-disclosure] 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Pavel Kankovsky (Mar 28)
      • Re: [Full-disclosure] 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code michaelslists (Mar 28)
      • Re: [Full-disclosure] 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Andrew van der Stock (Mar 28)
      • Re: [Full-disclosure] 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code michaelslists (Mar 28)
      • Java integer overflows (was: a really long topic) Andrew van der Stock (Mar 28)
      • Re: Java integer overflows (was: a really long topic) michaelslists (Mar 28)
      • Re: [Full-disclosure] Re: Java integer overflows (was: a really long topic) Eliah Kagan (Mar 28)
      • Re: [Full-disclosure] Re: Java integer overflows (was: a really long topic) michaelslists (Mar 28)
      • Re: [Full-disclosure] Re: Java integer overflows (was: a really longtopic) michaelslists (Mar 28)
      • Re: [Full-disclosure] Re: Java integer overflows (was: a really longtopic) Eliah Kagan (Mar 28)
      • [Full-disclosure] Re: Java integer overflows (was: a really longtopic) michaelslists (Mar 28)
      • Re: Java integer overflows (was: a really long topic) Eoin (Mar 29)
      • Re: [Full-disclosure] Java integer overflows (was: a really long topic) Simon Roberts (Mar 29)
      • RE: [Full-disclosure] Java integer overflows (was: a really long topic) Tim Hollebeek (Mar 30)
      • Re: [Full-disclosure] 4 Questions: Latest IE vulnerability,Firefox vs IE security, User vs Admin risk profile,and browsers coded in 100% Managed Verifiable code michaelslists (Mar 28)
      • Re: [Full-disclosure] 4 Questions: Latest IE vulnerability,Firefox vs IE security, User vs Admin risk profile,and browsers coded in 100% Managed Verifiable code Andrew van der Stock (Mar 28)
      • Re: [Full-disclosure] 4 Questions: Latest IE vulnerability,Firefox vs IE security, User vs Admin risk profile,and browsers coded in 100% Managed Verifiable code Brian Eaton (Mar 29)
      • Re: [Full-disclosure] 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code Brian Eaton (Mar 29)
• RE: [SC-L] 4 Questions: Latest IE vulnerability, Firefox vs IE security, Uservs Admin risk profile, and browsers coded in 100% Managed Verifiable code Wall, Kevin (Mar 25)
• Announcement: The Web Hacking Incidents Database contact (Mar 27)
• RE: [OWASP-LEADERS] Re: [Owasp-dotnet] RE: [SC-L] 4 Questions: Latest IE vulnerability, Firefox vs IE security, Uservs Admin risk profile, and browsers coded in 100% Managed Verifiable code Jeff Williams (Mar 27)
  • Re: [OWASP-LEADERS] Re: [Owasp-dotnet] RE: [SC-L] 4 Questions: Latest IE vulnerability, Firefox vs IE security, Uservs Admin risk profile, and browsers coded in 100% Managed Verifiable code Stephen de Vries (Mar 27)
    • Re: [OWASP-LEADERS] Re: [Owasp-dotnet] RE: [SC-L] 4 Questions: Latest IE vulnerability, Firefox vs IE security, Uservs Admin risk profile, and browsers coded in 100% Managed Verifiable code Dinis Cruz (Mar 28)
    • [Full-disclosure] Re: [OWASP-LEADERS] Re: [Owasp-dotnet] RE: [SC-L] 4 Questions: Latest IE vulnerability, Firefox vs IE security, Uservs Admin risk profile, and browsers coded in 100% Managed Verifiable code Dinis Cruz (Mar 28)
  • RE: [OWASP-LEADERS] Re: [Owasp-dotnet] RE: [SC-L] 4 Questions: Latest IE vulnerability, Firefox vs IE security, Uservs Admin risk profile, and browsers coded in 100% Managed Verifiable code Eric Swanson (Mar 27)
    • Re: [OWASP-LEADERS] Re: [Owasp-dotnet] RE: [SC-L] 4 Questions: Latest IE vulnerability, Firefox vs IE security, Uservs Admin risk profile, and browsers coded in 100% Managed Verifiable code Dinis Cruz (Mar 28)
    • [Full-disclosure] Re: [OWASP-LEADERS] Re: [Owasp-dotnet] RE: [SC-L] 4 Questions: Latest IE vulnerability, Firefox vs IE security, Uservs Admin risk profile, and browsers coded in 100% Managed Verifiable code Dinis Cruz (Mar 28)
  • Re: [OWASP-LEADERS] Re: [Owasp-dotnet] RE: [SC-L]4 Questions: Latest IE vulnerability, Firefox vs IE security,Uservs Admin risk profile,and browsers coded in 100% Managed Verifiable code ol (Mar 27)
  • <Possible follow-ups>
  • Re: [OWASP-LEADERS] Re: [Owasp-dotnet] RE: [SC-L] 4 Questions: Latest IE vulnerability, Firefox vs IE security, Uservs Admin risk profile, and browsers coded in 100% Managed Verifiable code Stephen de Vries (Mar 29)
• AJAX and Web application scanners rajeshdilli (Mar 27)
  • RE: AJAX and Web application scanners Tate Hansen (Mar 28)
  • Re: AJAX and Web application scanners Rogan Dawes (Mar 28)
  • <Possible follow-ups>
  • RE: AJAX and Web application scanners thomas.jones (Mar 28)
  • RE: AJAX and Web application scanners Evans, Arian (Mar 28)
  • Re: RE: AJAX and Web application scanners rajeshdilli (Mar 28)
  • RE: AJAX and Web application scanners Jeff Robertson (Mar 29)
    • Re: AJAX and Web application scanners Andrew van der Stock (Mar 29)
• RE: [WEB SECURITY] SSL does not = a secure website Sebastien Deleersnyder (Mar 28)
  • <Possible follow-ups>
  • Re: [WEB SECURITY] SSL does not = a secure website Richard St John (Mar 28)
  • Re: [WEB SECURITY] SSL does not = a secure website Nick Owen (Mar 28)
  • RE: [WEB SECURITY] SSL does not = a secure website Mark Mcdonald (Mar 28)
    • Re: [WEB SECURITY] SSL does not = a secure website michaelslists (Mar 28)
    • Re: [WEB SECURITY] SSL does not = a secure website Andrew van der Stock (Mar 28)
      • RE: [WEB SECURITY] SSL does not = a secure website Lyal Collins (Mar 29)
      • Re: [WEB SECURITY] SSL does not = a secure website Ryan Barnett (Mar 29)
      • Re: [WEB SECURITY] SSL does not = a secure website Brian Eaton (Mar 29)
  • Re: [WEB SECURITY] SSL does not = a secure website Brian Eaton (Mar 28)
    • Re: [WEB SECURITY] SSL does not = a secure website michaelslists (Mar 28)
  • RE: [WEB SECURITY] SSL does not = a secure website James Strassburg (Mar 28)
    • Re: [WEB SECURITY] SSL does not = a secure website Bill Pennington (Mar 28)
    • Re: [WEB SECURITY] SSL does not = a secure website Gervase Markham (Mar 29)
      • Re: [WEB SECURITY] SSL does not = a secure website Evert Collab (Mar 29)
  • RE: [WEB SECURITY] SSL does not = a secure website Jeremy Bellwood (Mar 28)
    • Re: [WEB SECURITY] SSL does not = a secure website michaelslists (Mar 28)
  • RE: [WEB SECURITY] SSL does not = a secure website PPowenski (Mar 29)
• Administrivia: Friday 31st March - Limited moderation, and cross-posting Andrew van der Stock (Mar 28)
• SSL does not = secure web site thomas.jones (Mar 28)
• Writing to a local file without a warning Frank Heyne (Mar 28)
  • <Possible follow-ups>
  • RE: Writing to a local file without a warning Griffiths, Ian (Mar 28)
    • Re: Writing to a local file without a warning Todd Hendricks (Mar 29)
      • Re: Writing to a local file without a warning Frank Heyne (Mar 29)
  • RE: Writing to a local file without a warning Damhuis Anton (Mar 29)
• Owasp SiteGenerator v0.70 (public beta release) Dinis Cruz (Mar 28)
• Request for licence to help in Owasp's SiteGenerator Development Dinis Cruz (Mar 28)
• Re: 4 Questions: Latest IE vulnerability,Firefox vs IE security, Uservs Admin risk profile, and browsers coded in100% Managed Verifiable code Jeff Williams (Mar 28)
  • Message not available
    • Re: [Full-disclosure] Re: [Owasp-dotnet] Re: 4 Questions: Latest IEvulnerability, Firefox vs IE security, Uservs Admin risk profile,and browsers coded in100% Managed Verifiable code michaelslists (Mar 29)
  • Re: [Owasp-dotnet] Re: 4 Questions: Latest IE vulnerability,Firefox vs IE security, Uservs Admin risk profile, and browsers coded in100% Managed Verifiable code michaelslists (Mar 29)
• On sandboxes, and why I ... don't care. Andrew van der Stock (Mar 29)
  • Re: On sandboxes, and why I ... don't care. michaelslists (Mar 30)
• Static vs Dynamic Analysis (was RE: AJAX and Web application scanners) James Walden (Mar 29)
• RE: [WEB SECURITY] Online Certificate of Authority Andre Maisonneuve (Mar 29)
  • <Possible follow-ups>
  • Re: [WEB SECURITY] Online Certificate of Authority Geoffrey (Mar 29)
• OSSTMM Security Analyst Training Live Stream on the Web Pete Herzog (Mar 29)
• SF new interview announcement: Open source security testing methodology Andrew van der Stock (Mar 29)
• Re: [Full-disclosure] Java integer overflows (was: a really long topic) KF (lists) (Mar 30)
• On sandboxes, and why you should care Dinis Cruz (Mar 30)
  • Re: On sandboxes, and why you should care Stephen de Vries (Mar 31)
• SSL Ciphers pagvac (Mar 30)
  • <Possible follow-ups>
  • RE: SSL Ciphers Dimitris Petropoulos (Mar 31)
• Black Hat Call for Papers and Registration now open Jeff Moss (Mar 31)

Previous period

Next period