Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



WebApp Sec: Re: stompy the session stomper - tool availability

Re: stompy the session stomper - tool availability

From: Michal Zalewski <lcamtuf_at_dione.ids.pl>
Date: Sun, 28 Jan 2007 11:16:27 +0100 (CET)

On Sun, 28 Jan 2007, Rogan Dawes wrote:

> Just wanted to point out that Dave has had nothing to do with WebScarab
> (and that I recognise that WebScarab's analysis is pretty trivial).

Geee, sorry, I suck for misspelling your name (but feel retroactively
avenged: this happens to me quite often ;-).

> Would you have any objection to me including/porting Stompy's analysis
> portion into WebScarab, to make it more accessible to folk?

No, why, it'd be in all likelihood helpful to others; the code is LGPLed,
and I can relicense it to you under some other terms if you prefer.

-------------------------------------------------------------------------
Sponsored by: Watchfire

It's been reported that 75% of websites are vulnerable to attack. That's
because hackers know to exploit weaknesses in web applications.
Traditional approaches to securing these assets no longer apply. Download
the "Addressing Challenges in Application Security" whitepaper today,
and see for yourself.

https://www.watchfire.com/securearea/whitepapers.aspx?id=701500000008fHF
--------------------------------------------------------------------------
Received on Jan 28 2007

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos