The Web Security Mailing List (2005 June)

• Date Index

• [WEB SECURITY] Fwd: VRT Certified Rules Update: 2005-06-29, Ryan Barnett
• [WEB SECURITY] web app security policies?, Arin Komins
• [WEB SECURITY] Call for Paritipation: C.I.P.H.E.R Contest, Maximillian Dornseif
• [WEB SECURITY] Http request smuggling's PCCA is netcache, Admin
• [WEB SECURITY] red-herring articl about application firewalls, webappsec
• [WEB SECURITY] OWASP-SoCal July Meeting Invitation, Kartik Trivedi
• [WEB SECURITY] Manual audits, John Muchow
  • RE: [WEB SECURITY] Manual audits, Ross Lotharius
  • <Possible follow-ups>
  • RE: [WEB SECURITY] Manual audits, zeno
  • RE: [WEB SECURITY] Manual audits, Aiken, Dan
• [WEB SECURITY] WASC Articles Project - Call for Participants, robert
• [WEB SECURITY] [IN]Secure Magazine v2 released, Bob Auger
• [WEB SECURITY] Security Audit Software, dpw
  • Re: [WEB SECURITY] Security Audit Software, Jeremiah Grossman
    • RE: [WEB SECURITY] Security Audit Software, dpw
  • Re: [WEB SECURITY] Security Audit Software, Peter Wood
  • RE: [WEB SECURITY] Security Audit Software, Chris Weber
  • Re: [WEB SECURITY] Security Audit Software, Arin Komins
  • <Possible follow-ups>
  • RE: [WEB SECURITY] Security Audit Software, Will Jefferies
    • Re: [WEB SECURITY] Security Audit Software, Bill Pennington
      • RE: [WEB SECURITY] Security Audit Software, Chris Weber
      • Re: [WEB SECURITY] Security Audit Software, Bill Pennington
      • Re: [WEB SECURITY] Security Audit Software, Pete Herzog
  • RE: [WEB SECURITY] Security Audit Software, Ory Segal
    • Re: [WEB SECURITY] Security Audit Software, Richard Moore
    • RE: [WEB SECURITY] Security Audit Software, Irene Abezgauz
    • RE: [WEB SECURITY] Security Audit Software, Chris Weber
  • RE: [WEB SECURITY] Security Audit Software, Evans, Arian
  • RE: [WEB SECURITY] Security Audit Software, Evans, Arian
    • RE: [WEB SECURITY] Security Audit Software, Arin Komins
  • RE: [WEB SECURITY] Security Audit Software, Evans, Arian
• [WEB SECURITY] WASC Distributed Open Proxy Honeypot Project - Call for Participants, Ryan Barnett
• [WEB SECURITY] PDF to JavaScript to XML to Exploit, Jeremiah Grossman
  • <Possible follow-ups>
  • RE: [WEB SECURITY] PDF to JavaScript to XML to Exploit, Paul Noble
  • RE: [WEB SECURITY] PDF to JavaScript to XML to Exploit, Harwood, Deanne I
• [WEB SECURITY] magic_quotes, Pablo Fernández
  • Re: [WEB SECURITY] magic_quotes, Dave King
    • Re: [WEB SECURITY] magic_quotes, Pablo Fernández
      • RE: [WEB SECURITY] magic_quotes, dpw
      • RE: [WEB SECURITY] magic_quotes, Pablo Fernández
  • Re: [WEB SECURITY] magic_quotes, Dave King
  • <Possible follow-ups>
  • RE: [WEB SECURITY] magic_quotes, Matt Fisher
    • Re: [WEB SECURITY] magic_quotes, Daniel
• [WEB SECURITY] Can HTTP Request Smuggling be blocked by Web Application Firewalls?, Amit Klein (AKsecurity)
  • Re: [WEB SECURITY] Can HTTP Request Smuggling be blocked by Web Application Firewalls?, Daniel
    • Re: [WEB SECURITY] Can HTTP Request Smuggling be blocked by Web Application Firewalls?, Amit Klein (AKsecurity)
  • [WEB SECURITY] Re: Can HTTP Request Smuggling be blocked by Web Application Firewalls?, Andrew van der Stock
    • [WEB SECURITY] Re: Can HTTP Request Smuggling be blocked by Web Application Firewalls?, Amit Klein (AKsecurity)
• [WEB SECURITY] Frontpage Exploit - Strange POST Payload, Ryan Barnett
  • RE: [WEB SECURITY] Frontpage Exploit - Strange POST Payload, Chris Weber
    • Re: [WEB SECURITY] Frontpage Exploit - Strange POST Payload, Ryan Barnett
  • Re: [WEB SECURITY] Frontpage Exploit - Strange POST Payload, Kanatoko
  • Re: [WEB SECURITY] Frontpage Exploit - Strange POST Payload, Andrew Simmons
• [WEB SECURITY] WASC-Articles: 'Common Security Problems in the Code of Dynamic Web Applications' By Sverre H. Huseby, contact
• [WEB SECURITY] Password Recovery, Dave King
  • RE: [WEB SECURITY] Password Recovery, Ofer Maor
    • RE: [WEB SECURITY] Password Recovery, dpw
      • RE: [WEB SECURITY] Password Recovery, Rich Salz
      • Re: [WEB SECURITY] Password Recovery, Daniel
      • Re: [WEB SECURITY] Password Recovery, Ian Holsman
      • RE: [WEB SECURITY] Password Recovery, ams67
      • RE: [WEB SECURITY] Password Recovery, Al
      • Re: [WEB SECURITY] Password Recovery, Willie Northway
      • RE: [WEB SECURITY] Password Recovery, Irene Abezgauz
      • RE: [WEB SECURITY] Password Recovery, Ofer Maor
    • RE: [WEB SECURITY] Password Recovery, dpw
      • RE: [WEB SECURITY] Password Recovery, Al
      • RE: [WEB SECURITY] Password Recovery, dpw
      • RE: [WEB SECURITY] Password Recovery, prateek mishra
      • Re: [WEB SECURITY] Password Recovery, Jeremiah Grossman
      • Re: [WEB SECURITY] Password Recovery, Mike Shema
  • Re: [WEB SECURITY] Password Recovery, Jeremiah Grossman
    • RE: [WEB SECURITY] Password Recovery, Lyal Collins
  • <Possible follow-ups>
  • RE: [WEB SECURITY] Password Recovery, ulrich . boche
    • RE: [WEB SECURITY] Password Recovery, ams67
• [WEB SECURITY] XSS filters, dpw
  • RE: [WEB SECURITY] XSS filters, Chris Weber
  • <Possible follow-ups>
  • Re: [WEB SECURITY] XSS filters, Sam Buchanan
  • RE: [WEB SECURITY] XSS filters, Matt Fisher
• [WEB SECURITY] Auditing Web Application Security, Lander Bouten
  • Re: [WEB SECURITY] Auditing Web Application Security, Daniel
  • RE: [WEB SECURITY] Auditing Web Application Security, Chris Weber
• [WEB SECURITY] ntop - securing access via the internet, Gavin McDougall
  • [WEB SECURITY] Re: [GLUG-chat] ntop - securing access via the internet, Marko Vukovic
• [WEB SECURITY] Book Review: "Apache Security" By O'Reilly, zeno
• [WEB SECURITY] "Microsoft's Security Response Center: How Little Patches Are Made", robert
• [WEB SECURITY] about HTTP/1.0 and HTTP/1.1?, Monty Ree
  • RE: [WEB SECURITY] about HTTP/1.0 and HTTP/1.1?, Yuval Ben-Itzhak
    • RE: [WEB SECURITY] about HTTP/1.0 and HTTP/1.1?, Monty Ree
  • Re: [WEB SECURITY] about HTTP/1.0 and HTTP/1.1?, Achim Hoffmann
• [WEB SECURITY] "Meanwhile, on the other side of the web server" - a writeup by Amit Klein, Amit Klein (AKsecurity)
  • Re: [WEB SECURITY] "Meanwhile, on the other side of the web server" - a writeup by Amit Klein, Ryan Barnett
    • Re: [WEB SECURITY] "Meanwhile, on the other side of the web server" - a writeup by Amit Klein, Amit Klein (AKsecurity)
  • Re: [WEB SECURITY] "Meanwhile, on the other side of the web server" - a writeup by Amit Klein, Richard Moore
    • Re: [WEB SECURITY] "Meanwhile, on the other side of the web server" - a writeup by Amit Klein, Amit Klein (AKsecurity)
  • <Possible follow-ups>
  • RE: [WEB SECURITY] "Meanwhile, on the other side of the web server" - a writeup by Amit Klein, Ory Segal
• [WEB SECURITY] Securing a website, Paul Ryan
  • Re: [WEB SECURITY] Securing a website, Code Freak
  • Re: [WEB SECURITY] Securing a website, Jeremiah Grossman
  • Re: [WEB SECURITY] Securing a website, Ryan Barnett
  • <Possible follow-ups>
  • RE: [WEB SECURITY] Securing a website, Ofer Shezaf
• [WEB SECURITY] Phishing/Spoofing FAQ, and questions re unprotected login sites, Amir Herzberg
  • Re: [WEB SECURITY] Phishing/Spoofing FAQ, and questions re unprotected login sites, Achim Hoffmann
    • Re: [WEB SECURITY] Phishing/Spoofing FAQ, and questions re unprotected login sites, Jeremiah Grossman
  • Re: [WEB SECURITY] Phishing/Spoofing FAQ, and questions re unprotected login sites, Jeremiah Grossman
  • Re: [WEB SECURITY] Phishing/Spoofing FAQ, and questions re unprotected login sites, Amit Klein (AKsecurity)
  • Re: [WEB SECURITY] Phishing/Spoofing FAQ, and questions re unprotected login sites, Neil Smithline
  • <Possible follow-ups>
  • RE: [WEB SECURITY] Phishing/Spoofing FAQ, and questions re unprotected login sites, Will Jefferies
    • Re: [WEB SECURITY] Phishing/Spoofing FAQ, and questions re unprotected login sites, Achim Hoffmann
• RE: [WEB SECURITY] Parameter tampering with z/os n-tiers web application, Martin O'Neal
• [WEB SECURITY] Parameter tampering with z/os n-tiers web application, Frederic Charpentier
• [WEB SECURITY] RE: [WEB security audit - how to avoid legal prosecution, Don_Tuer
• [WEB SECURITY] Strange HTTP requests, Kanatoko
  • Re: [WEB SECURITY] Strange HTTP requests, Ryan Barnett
    • Re: [WEB SECURITY] Strange HTTP requests, Ryan Barnett
    • Re: [WEB SECURITY] Strange HTTP requests, Ryan Barnett
  • <Possible follow-ups>
  • RE: [WEB SECURITY] Strange HTTP requests, Bob Auger
  • RE: [WEB SECURITY] Strange HTTP requests, Will Jefferies
    • Re: [WEB SECURITY] Strange HTTP requests, Kanatoko
• [WEB SECURITY] security audit - how to avoid legal prosecution, Maxim Kostioukov
  • Re: [WEB SECURITY] security audit - how to avoid legal prosecution, Randal L. Schwartz
  • Re: [WEB SECURITY] security audit - how to avoid legal prosecution, Jay D. Dyson
  • Re: [WEB SECURITY] security audit - how to avoid legal prosecution [DEAD], Jeremiah Grossman
  • RE: [WEB SECURITY] security audit - how to avoid legal prosecution, Lyal Collins
  • <Possible follow-ups>
  • RE: [WEB SECURITY] security audit - how to avoid legal prosecution, Nathan Tobik
  • RE: [WEB SECURITY] security audit - how to avoid legal prosecution, Martin O'Neal
    • Re: [WEB SECURITY] security audit - how to avoid legal prosecution, Achim Hoffmann
      • Re: [WEB SECURITY] security audit - how to avoid legal prosecution, Jay D. Dyson
      • Re: [WEB SECURITY] security audit - how to avoid legal prosecution, Achim Hoffmann
  • RE: [WEB SECURITY] security audit - how to avoid legal prosecution, Aiken, Dan
  • Re: RE: [WEB SECURITY] security audit - how to avoid legal prosecution, Bob Radvanovsky
  • RE: [WEB SECURITY] security audit - how to avoid legal prosecution, Will Jefferies
  • RE: [WEB SECURITY] security audit - how to avoid legal prosecution, Maxim Kostioukov
  • RE: [WEB SECURITY] security audit - how to avoid legal prosecution, Maxim Kostioukov
    • Re: [WEB SECURITY] security audit - how to avoid legal prosecution, Randal L. Schwartz
  • RE: [WEB SECURITY] security audit - how to avoid legal prosecution, Maxim Kostioukov
  • RE: [WEB SECURITY] security audit - how to avoid legal prosecution, Martin O'Neal
  • Re: [WEB SECURITY] security audit - how to avoid legal prosecution, DasPadre
• [WEB SECURITY] Firewall recommendations, Gavin McDougall
  • Re: [WEB SECURITY] Firewall recommendations, dallas jordan
  • Re: [WEB SECURITY] Firewall recommendations, Jason Dixon
    • Re: [WEB SECURITY] Firewall recommendations, fizban
  • <Possible follow-ups>
  • RE: [WEB SECURITY] Firewall recommendations, Maxim Kostioukov
    • Re: [WEB SECURITY] Firewall recommendations, Gavin McDougall
• [WEB SECURITY] OWASP SoCal Chapter - New Mailing List, Kartik.Trivedi
• [WEB SECURITY] about http method, Monty Ree
  • Re: [WEB SECURITY] about http method, Richard Moore
  • Re: [WEB SECURITY] about http method, Leandro Meiners
• [WEB SECURITY] stats on how web app vulns are identified, Jeremiah Grossman
  • Re: [WEB SECURITY] stats on how web app vulns are identified, Achim Hoffmann
  • Re: [WEB SECURITY] stats on how web app vulns are identified, Minga
  • <Possible follow-ups>
  • RE: [WEB SECURITY] stats on how web app vulns are identified, Will Jefferies
• [WEB SECURITY] MS HotMail XSS Issue, Bill Pennington
• [WEB SECURITY] apache issue, Anita Salerno
  • Re: [WEB SECURITY] apache issue, Ryan Barnett
    • Re: [WEB SECURITY] apache issue, Anita Salerno
  • Re: [WEB SECURITY] apache issue, Jay D. Dyson
    • Re: [WEB SECURITY] apache issue, Ivan Ristic
      • Re: [WEB SECURITY] apache issue, Jay D. Dyson
      • Re: [WEB SECURITY] apache issue, Mike Duncan
      • Re: [WEB SECURITY] apache issue, Jay D. Dyson
      • Re: [WEB SECURITY] apache issue, Mike Duncan
  • Re: [WEB SECURITY] apache issue, Matthieu Estrade
• [WEB SECURITY] A new whitepaper by Watchfire - HTTP Request Smuggling, Ory Segal
• [WEB SECURITY] MSN site hacked in South Korea, zeno
  • <Possible follow-ups>
  • RE: [WEB SECURITY] MSN site hacked in South Korea, Ofer Shezaf
    • Re: [WEB SECURITY] MSN site hacked in South Korea, Jeremiah Grossman
  • RE: [WEB SECURITY] MSN site hacked in South Korea, Ofer Shezaf
• [WEB SECURITY] PHP code exploit discussion board..., Bob Radvanovsky
  • Re: [WEB SECURITY] PHP code exploit discussion board..., Peter Prochaska
• RE: [WEB SECURITY] (RESULTS) collecting real world web hacking url's, Ofer Shezaf
• Re: [WEB SECURITY] Securing apache installation with PHP, Richard Moore
  • Re: [WEB SECURITY] Securing apache installation with PHP, Ivan Ristic
  • Re: [WEB SECURITY] Securing apache installation with PHP, Gerry Murphy