WebApp Sec: by thread

• RSS Feed
•  About List
•  All Lists

Previous period

Next period

127 messages starting Oct 01 06 and ending Dec 31 06
Date index | Thread index | Author index

• FW: XML File Inclusion and Path Traversal Attacks (was RE: XML Port Scanning) Mark Mcdonald (Oct 01)
  • <Possible follow-ups>
  • RE: XML File Inclusion and Path Traversal Attacks (was RE: XML Port Scanning) Nish Bhalla (Oct 01)
• RE: Open Source Application Vulnerability Assessment Tools Arian J. Evans (Oct 01)
  • <Possible follow-ups>
  • RE: Open Source Application Vulnerability Assessment Tools Arian J. Evans (Oct 02)
• JavaScript External Scanner (JSEScanner) David Kierznowski (Oct 01)
• Call for panelists: "The role of frameworks (e.g., .Net, Java, Enterprise Library, Struts, JaCorb) in 'forcing' developers to create and deploy 'secure' applications" panel in the next OWASP Conference Dinis Cruz (Oct 02)
• Full Disc Encryption use and implementation strategy Discussion Forum Saqib Ali (Oct 02)
• PacSec 2006 announcement, EUSecWest 2007 Call For Papers (Mar 1-2, deadline Oct 20th) Dragos Ruiu (Oct 03)
• Platform specific error codes. Zapotek (Oct 03)
  • Re: Platform specific error codes. Eoin (Oct 04)
    • Re: Platform specific error codes. Zapotek (Oct 04)
• Netscape 8 inherits firefox, explorer vulnerabilities Emanuel Marufo (Oct 03)
  • RE: Netscape 8 inherits firefox, explorer vulnerabilities Benjamin Tomhave (Oct 04)
• Sharepoint and .Net Vlad (Oct 03)
• Google code search Stephen de Vries (Oct 04)
  • Re: Google code search Zapotek (Oct 05)
  • Re: Google code search Ryan Barnett (Oct 05)
  • Magic Quotes DokFLeed (Oct 09)
    • Message not available
      • Re: Magic Quotes DokFLeed (Oct 10)
    • Re: Magic Quotes Tomek Perlak (Oct 10)
      • RE: Magic Quotes Matt Fisher (Oct 11)
    • Re: Magic Quotes Steve Slater (Oct 11)
      • Re: Magic Quotes DokFLeed (Oct 15)
      • Re: Magic Quotes Brad Lhotsky (Oct 16)
      • Message not available
      • Re: Magic Quotes DokFLeed (Oct 17)
      • Re: Magic Quotes Brad Lhotsky (Oct 17)
      • Re: Magic Quotes DokFLeed (Oct 17)
• JavaScript Web Ping Tool David Kierznowski (Oct 05)
• SQL In the Request bryan allott (Oct 05)
  • RE: SQL In the Request Arian J. Evans (Oct 09)
• RE: [WEB SECURITY] Re: SQL In the Request Ory Segal (Oct 05)
  • RE: [WEB SECURITY] Re: SQL In the Request Rowland (Oct 09)
  • <Possible follow-ups>
  • RE: [WEB SECURITY] Re: SQL In the Request Erez Metula (Oct 05)
    • RE: [WEB SECURITY] Re: SQL In the Request Nish Bhalla (Oct 05)
  • Re: [WEB SECURITY] Re: SQL In the Request bugtraq (Oct 05)
    • Re: [WEB SECURITY] Re: SQL In the Request bryan allott (Oct 09)
      • RE: [WEB SECURITY] Re: SQL In the Request Jeff Robertson (Oct 09)
      • Re: [WEB SECURITY] Re: SQL In the Request bryan allott (Oct 09)
      • Re: [WEB SECURITY] Re: SQL In the Request Rick Zhong (Oct 09)
  • Re: [WEB SECURITY] Re: SQL In the Request bryan allott (Oct 09)
  • RE: [WEB SECURITY] Re: SQL In the Request Jeff Robertson (Oct 09)
• More Fun with CSS History Theft bugtraq (Oct 09)
• OWASP Testing Guide v2: let's start! (Call for participation) Matteo Meucci (Oct 09)
• HITBSecConf2006 CTF Source code and daemons Praburaajan (Oct 09)
• Black Hat CFP, Registration, and Announcements for October Jeff Moss (Oct 15)
• Netflix.com XSRF vuln Dave Ferguson (Oct 16)
• Teros or Citrix Application Firewall bill . fetters (Oct 19)
• XSS - how to run script Tal Argoni (Oct 19)
  • Re: XSS - how to run script A. R. (Oct 19)
    • RE: XSS - how to run script Joshua Perrymon (Oct 19)
• OWASP Report Generator (v0.75 corrupt on SourceForge?) James Strassburg (Oct 20)
• 2-factor auth for all Saqib Ali (Oct 23)
  • RE: 2-factor auth for all Benjamin Tomhave (Oct 27)
  • Re: 2-factor auth for all David Kierznowski (Oct 27)
    • Re: 2-factor auth for all Saqib Ali (Oct 27)
  • RE: 2-factor auth for all Nick Owen (Oct 27)
    • Re: 2-factor auth for all Saqib Ali (Oct 27)
      • Re: 2-factor auth for all Nick Owen (Oct 27)
• Search Engine for Security and eSecurity Community Saqib Ali (Oct 27)
  • Re: Search Engine for Security and eSecurity Community Stefano Di Paola (Nov 01)
  • Message not available
    • Re: Search Engine for Security and eSecurity Community Saqib Ali (Nov 01)
  • Re: Search Engine for Security and eSecurity Community Rory McCune (Nov 01)
• Why doesn't Amazon enforce a password policy? James Strassburg (Oct 27)
  • Re: Why doesn't Amazon enforce a password policy? Peter Conrad (Oct 30)
  • Re: Why doesn't Amazon enforce a password policy? Tom Whiting (Nov 01)
  • Re: Why doesn't Amazon enforce a password policy? Jeff Robertson (Nov 01)
  • Re: Why doesn't Amazon enforce a password policy? Jamie Riden (Nov 01)
  • <Possible follow-ups>
  • RE: Why doesn't Amazon enforce a password policy? James Strassburg (Nov 01)
    • Re: Why doesn't Amazon enforce a password policy? Jeff Robertson (Nov 01)
      • Re: Why doesn't Amazon enforce a password policy? Gunnar Rene Øie (Nov 01)
      • Re: Why doesn't Amazon enforce a password policy? Gunnar Rene Øie (Nov 01)
  • RE: Why doesn't Amazon enforce a password policy? Brooks, Shane (Nov 01)
  • RE: Why doesn't Amazon enforce a password policy? Jason Gregson (Nov 01)
• Fuzzer Sources Mike Gibson (Oct 27)
  • Re: Fuzzer Sources crazy frog crazy frog (Nov 01)
• Cannibals are what they eat David Glosser (Nov 01)
• Educational write-up by Amit Klein: "A Refreshing Look at Redirection" Amit Klein (Nov 02)
• EUSecWest/London CFP extended to Nov. 7 Dragos Ruiu (Nov 02)
• How to find the login name of a user accessing my website Anurag Agarwal (Nov 05)
  • Re: How to find the login name of a user accessing my website ed (Nov 05)
  • Re: How to find the login name of a user accessing my website Dhruv Soi (Nov 05)
  • RE: How to find the login name of a user accessing my website Maxime Ducharme (Nov 06)
• XSS Shell v0.3.9 Ferruh Mavituna (Nov 05)
• New version of Reform encoding library Michael Eddington (Nov 06)
• .NET Web Service Validation Michael Eddington (Nov 06)
• Call for papers: ARES 2007 submission deadline approaches in 2 weeks: 19-11-2006 Manh Tho (Nov 07)
• RE: [Full-disclosure] SQL Injection with cursors? Maxime Ducharme (Nov 08)
• RSS Injection in Sage part 2 David Kierznowski (Nov 08)
• Files upload security considerations Alexander Berezhnoy (Nov 09)
  • Re: Files upload security considerations ed (Nov 09)
    • Re: Files upload security considerations Peter Butler (Nov 11)
      • Re: Files upload security considerations ed (Nov 13)
  • Re: Files upload security considerations Cleiton Martins (Nov 09)
  • <Possible follow-ups>
  • Re: Files upload security considerations c0redump (Nov 09)
  • Re: Files upload security considerations c0redump (Nov 09)
    • Re: Files upload security considerations Hemil (Nov 11)
• Ajax Security presentation from OWASP meeting Andrew van der Stock (Nov 09)
• SIFT Web Services Security Testing Framework Paul Theriault (Nov 13)
• Challenges faced by automated web application security assessment tools bugtraq (Nov 13)
• Re: [WEB SECURITY] Java Swing Application Security Jeff Robertson (Nov 16)
• Re: Enumerate Web Virtual Site pagvac (Nov 19)
• RE: [WEB SECURITY] Sesion hijacking impossible with SSL client authentication? Boaz Shunami (Nov 25)
  • Re: [WEB SECURITY] Sesion hijacking impossible with SSL client authentication? ed (Nov 27)
• Fwd: SF new column announcement: A Hard Lesson in Privacy Andrew van der Stock (Nov 27)
• Is URL encoding required. Sharma, Amit (Nov 27)
• Administrivia Andrew van der Stock (Dec 04)
• WASC-Announcement: MX Injection - Capturing and Exploiting Hidden Mail Servers By Vicente Aguilera Diaz robert (Dec 11)
• platform/language crib sheets Robin Wood (Dec 11)
• WASC Articles Project - Call for Participants robert (Dec 11)
• forbid non-secure proxy access trespiko (Dec 14)
  • Re: forbid non-secure proxy access my.info.lists () gmail com (Dec 15)
• CanSecWest 2007 (April 18-20) Call For Papers (Deadline January 7th) Dragos Ruiu (Dec 14)
• Application Security Predictions for 2007 bugtraq (Dec 14)
• What problem have this Rijndael(.NET&PHP) code? 김영일 (Dec 15)
  • Re: What problem have this Rijndael(.NET&PHP) code? Peter Conrad (Dec 18)
  • Message not available
    • Re: What problem have this Rijndael(.NET&PHP) code? Scott C. Sanchez (Dec 18)
  • Re: What problem have this Rijndael(.NET&PHP) code? Jamie Riden (Dec 18)
• Web Backdoor Compilation David Kierznowski (Dec 18)
• Re: [WEB SECURITY] Session hijacking via XSS vuln requring POST impossible? RSnake (Dec 18)
• HITBSecConf2007 - Dubai - Call for Papers now open! Praburaajan (Dec 18)
• Ruining Security with java.util.Random Jan P. Monsch (Dec 18)
  • Re: Ruining Security with java.util.Random Amit Klein (Dec 19)
• Preliminary Call For Papers: OWASP 2007 Europe Frank Piessens (Dec 22)
• ERRATA (Re: "Host header cannot be trusted as an anti anti DNS-pinning measure") Amit Klein (Dec 26)
  • Re: ERRATA (Re: "Host header cannot be trusted as an anti anti DNS-pinning measure") Martin Johns (Dec 26)
• XSS caused by Greasemonkey userscript Martin Johns (Dec 29)
• Fierce domain scan released RSnake (Dec 31)

Previous period

Next period