The Web Security Mailing List (2005 June)

• Thread Index

• Re: [WEB SECURITY] Securing apache installation with PHP
  • From: Richard Moore
• RE: [WEB SECURITY] (RESULTS) collecting real world web hacking url's
  • From: Ofer Shezaf
• Re: [WEB SECURITY] Securing apache installation with PHP
  • From: Ivan Ristic
• [WEB SECURITY] PHP code exploit discussion board...
  • From: Bob Radvanovsky
• Re: [WEB SECURITY] Securing apache installation with PHP
  • From: Gerry Murphy
• [WEB SECURITY] MSN site hacked in South Korea
  • From: zeno
• Re: [WEB SECURITY] PHP code exploit discussion board...
  • From: Peter Prochaska
• [WEB SECURITY] A new whitepaper by Watchfire - HTTP Request Smuggling
  • From: Ory Segal
• [WEB SECURITY] apache issue
  • From: Anita Salerno
• [WEB SECURITY] MS HotMail XSS Issue
  • From: Bill Pennington
• Re: [WEB SECURITY] apache issue
  • From: Ryan Barnett
• Re: [WEB SECURITY] apache issue
  • From: Jay D. Dyson
• Re: [WEB SECURITY] apache issue
  • From: Matthieu Estrade
• Re: [WEB SECURITY] apache issue
  • From: Ivan Ristic
• [WEB SECURITY] stats on how web app vulns are identified
  • From: Jeremiah Grossman
• RE: [WEB SECURITY] stats on how web app vulns are identified
  • From: Will Jefferies
• Re: [WEB SECURITY] apache issue
  • From: Jay D. Dyson
• [WEB SECURITY] about http method
  • From: Monty Ree
• [WEB SECURITY] OWASP SoCal Chapter - New Mailing List
  • From: Kartik.Trivedi
• Re: [WEB SECURITY] about http method
  • From: Richard Moore
• Re: [WEB SECURITY] apache issue
  • From: Anita Salerno
• RE: [WEB SECURITY] MSN site hacked in South Korea
  • From: Ofer Shezaf
• [WEB SECURITY] Firewall recommendations
  • From: Gavin McDougall
• Re: [WEB SECURITY] about http method
  • From: Leandro Meiners
• Re: [WEB SECURITY] Firewall recommendations
  • From: dallas jordan
• Re: [WEB SECURITY] Firewall recommendations
  • From: Jason Dixon
• RE: [WEB SECURITY] Firewall recommendations
  • From: Maxim Kostioukov
• Re: [WEB SECURITY] apache issue
  • From: Mike Duncan
• [WEB SECURITY] security audit - how to avoid legal prosecution
  • From: Maxim Kostioukov
• RE: [WEB SECURITY] security audit - how to avoid legal prosecution
  • From: Nathan Tobik
• Re: [WEB SECURITY] Firewall recommendations
  • From: Gavin McDougall
• Re: [WEB SECURITY] Firewall recommendations
  • From: fizban
• RE: [WEB SECURITY] security audit - how to avoid legal prosecution
  • From: Martin O'Neal
• Re: [WEB SECURITY] security audit - how to avoid legal prosecution
  • From: Randal L. Schwartz
• RE: [WEB SECURITY] security audit - how to avoid legal prosecution
  • From: Aiken, Dan
• Re: [WEB SECURITY] apache issue
  • From: Jay D. Dyson
• [WEB SECURITY] Strange HTTP requests
  • From: Kanatoko
• Re: [WEB SECURITY] security audit - how to avoid legal prosecution
  • From: Jay D. Dyson
• Re: RE: [WEB SECURITY] security audit - how to avoid legal prosecution
  • From: Bob Radvanovsky
• Re: [WEB SECURITY] MSN site hacked in South Korea
  • From: Jeremiah Grossman
• [WEB SECURITY] RE: [WEB security audit - how to avoid legal prosecution
  • From: Don_Tuer
• RE: [WEB SECURITY] security audit - how to avoid legal prosecution
  • From: Will Jefferies
• Re: [WEB SECURITY] Strange HTTP requests
  • From: Ryan Barnett
• Re: [WEB SECURITY] Strange HTTP requests
  • From: Ryan Barnett
• Re: [WEB SECURITY] security audit - how to avoid legal prosecution [DEAD]
  • From: Jeremiah Grossman
• RE: [WEB SECURITY] Strange HTTP requests
  • From: Bob Auger
• RE: [WEB SECURITY] security audit - how to avoid legal prosecution
  • From: Maxim Kostioukov
• RE: [WEB SECURITY] security audit - how to avoid legal prosecution
  • From: Maxim Kostioukov
• RE: [WEB SECURITY] security audit - how to avoid legal prosecution
  • From: Maxim Kostioukov
• Re: [WEB SECURITY] Strange HTTP requests
  • From: Ryan Barnett
• Re: [WEB SECURITY] security audit - how to avoid legal prosecution
  • From: Randal L. Schwartz
• Re: [WEB SECURITY] security audit - how to avoid legal prosecution
  • From: Achim Hoffmann
• Re: [WEB SECURITY] apache issue
  • From: Mike Duncan
• Re: [WEB SECURITY] stats on how web app vulns are identified
  • From: Achim Hoffmann
• Re: [WEB SECURITY] security audit - how to avoid legal prosecution
  • From: Jay D. Dyson
• [WEB SECURITY] Parameter tampering with z/os n-tiers web application
  • From: Frederic Charpentier
• RE: [WEB SECURITY] Parameter tampering with z/os n-tiers web application
  • From: Martin O'Neal
• RE: [WEB SECURITY] security audit - how to avoid legal prosecution
  • From: Lyal Collins
• Re: [WEB SECURITY] security audit - how to avoid legal prosecution
  • From: Achim Hoffmann
• RE: [WEB SECURITY] security audit - how to avoid legal prosecution
  • From: Martin O'Neal
• Re: [WEB SECURITY] Strange HTTP requests
  • From: Kanatoko
• RE: [WEB SECURITY] Strange HTTP requests
  • From: Will Jefferies
• [WEB SECURITY] Phishing/Spoofing FAQ, and questions re unprotected login sites
  • From: Amir Herzberg
• Re: [WEB SECURITY] Phishing/Spoofing FAQ, and questions re unprotected login sites
  • From: Achim Hoffmann
• Re: [WEB SECURITY] Phishing/Spoofing FAQ, and questions re unprotected login sites
  • From: Jeremiah Grossman
• Re: [WEB SECURITY] Phishing/Spoofing FAQ, and questions re unprotected login sites
  • From: Jeremiah Grossman
• Re: [WEB SECURITY] Phishing/Spoofing FAQ, and questions re unprotected login sites
  • From: Amit Klein (AKsecurity)
• Re: [WEB SECURITY] Phishing/Spoofing FAQ, and questions re unprotected login sites
  • From: Neil Smithline
• [WEB SECURITY] Securing a website
  • From: Paul Ryan
• Re: [WEB SECURITY] Securing a website
  • From: Code Freak
• Re: [WEB SECURITY] Securing a website
  • From: Jeremiah Grossman
• Re: [WEB SECURITY] Securing a website
  • From: Ryan Barnett
• RE: [WEB SECURITY] Securing a website
  • From: Ofer Shezaf
• [WEB SECURITY] "Meanwhile, on the other side of the web server" - a writeup by Amit Klein
  • From: Amit Klein (AKsecurity)
• RE: [WEB SECURITY] MSN site hacked in South Korea
  • From: Ofer Shezaf
• Re: [WEB SECURITY] "Meanwhile, on the other side of the web server" - a writeup by Amit Klein
  • From: Ryan Barnett
• Re: [WEB SECURITY] "Meanwhile, on the other side of the web server" - a writeup by Amit Klein
  • From: Amit Klein (AKsecurity)
• Re: [WEB SECURITY] "Meanwhile, on the other side of the web server" - a writeup by Amit Klein
  • From: Richard Moore
• RE: [WEB SECURITY] Phishing/Spoofing FAQ, and questions re unprotected login sites
  • From: Will Jefferies
• [WEB SECURITY] about HTTP/1.0 and HTTP/1.1?
  • From: Monty Ree
• RE: [WEB SECURITY] "Meanwhile, on the other side of the web server" - a writeup by Amit Klein
  • From: Ory Segal
• Re: [WEB SECURITY] security audit - how to avoid legal prosecution
  • From: DasPadre
• RE: [WEB SECURITY] about HTTP/1.0 and HTTP/1.1?
  • From: Yuval Ben-Itzhak
• [WEB SECURITY] "Microsoft's Security Response Center: How Little Patches Are Made"
  • From: robert
• Re: [WEB SECURITY] Phishing/Spoofing FAQ, and questions re unprotected login sites
  • From: Achim Hoffmann
• Re: [WEB SECURITY] about HTTP/1.0 and HTTP/1.1?
  • From: Achim Hoffmann
• Re: [WEB SECURITY] "Meanwhile, on the other side of the web server" - a writeup by Amit Klein
  • From: Amit Klein (AKsecurity)
• Re: [WEB SECURITY] stats on how web app vulns are identified
  • From: Minga
• [WEB SECURITY] Book Review: "Apache Security" By O'Reilly
  • From: zeno
• [WEB SECURITY] ntop - securing access via the internet
  • From: Gavin McDougall
• [WEB SECURITY] Re: [GLUG-chat] ntop - securing access via the internet
  • From: Marko Vukovic
• [WEB SECURITY] Auditing Web Application Security
  • From: Lander Bouten
• Re: [WEB SECURITY] Auditing Web Application Security
  • From: Daniel
• RE: [WEB SECURITY] Auditing Web Application Security
  • From: Chris Weber
• [WEB SECURITY] XSS filters
  • From: dpw
• RE: [WEB SECURITY] XSS filters
  • From: Chris Weber
• Re: [WEB SECURITY] XSS filters
  • From: Sam Buchanan
• [WEB SECURITY] Password Recovery
  • From: Dave King
• RE: [WEB SECURITY] Password Recovery
  • From: Ofer Maor
• Re: [WEB SECURITY] Password Recovery
  • From: Jeremiah Grossman
• RE: [WEB SECURITY] Password Recovery
  • From: dpw
• RE: [WEB SECURITY] Password Recovery
  • From: Lyal Collins
• RE: [WEB SECURITY] Password Recovery
  • From: Rich Salz
• RE: [WEB SECURITY] Password Recovery
  • From: ams67
• Re: [WEB SECURITY] Password Recovery
  • From: Daniel
• Re: [WEB SECURITY] Password Recovery
  • From: Ian Holsman
• RE: [WEB SECURITY] Password Recovery
  • From: Ofer Maor
• RE: [WEB SECURITY] Password Recovery
  • From: Al
• RE: [WEB SECURITY] XSS filters
  • From: Matt Fisher
• RE: [WEB SECURITY] Password Recovery
  • From: dpw
• RE: [WEB SECURITY] Password Recovery
  • From: Al
• RE: [WEB SECURITY] Password Recovery
  • From: dpw
• RE: [WEB SECURITY] Password Recovery
  • From: prateek mishra
• Re: [WEB SECURITY] Password Recovery
  • From: Jeremiah Grossman
• Re: [WEB SECURITY] Password Recovery
  • From: Mike Shema
• RE: [WEB SECURITY] Password Recovery
  • From: ulrich . boche
• RE: [WEB SECURITY] Password Recovery
  • From: ams67
• Re: [WEB SECURITY] Password Recovery
  • From: Willie Northway
• [WEB SECURITY] WASC-Articles: 'Common Security Problems in the Code of Dynamic Web Applications' By Sverre H. Huseby
  • From: contact
• [WEB SECURITY] Frontpage Exploit - Strange POST Payload
  • From: Ryan Barnett
• RE: [WEB SECURITY] Password Recovery
  • From: Irene Abezgauz
• RE: [WEB SECURITY] Frontpage Exploit - Strange POST Payload
  • From: Chris Weber
• Re: [WEB SECURITY] Frontpage Exploit - Strange POST Payload
  • From: Ryan Barnett
• [WEB SECURITY] Can HTTP Request Smuggling be blocked by Web Application Firewalls?
  • From: Amit Klein (AKsecurity)
• [WEB SECURITY] magic_quotes
  • From: Pablo Fernández
• Re: [WEB SECURITY] magic_quotes
  • From: Dave King
• Re: [WEB SECURITY] magic_quotes
  • From: Dave King
• RE: [WEB SECURITY] magic_quotes
  • From: Matt Fisher
• Re: [WEB SECURITY] magic_quotes
  • From: Daniel
• Re: [WEB SECURITY] Can HTTP Request Smuggling be blocked by Web Application Firewalls?
  • From: Daniel
• [WEB SECURITY] PDF to JavaScript to XML to Exploit
  • From: Jeremiah Grossman
• RE: [WEB SECURITY] about HTTP/1.0 and HTTP/1.1?
  • From: Monty Ree
• Re: [WEB SECURITY] Frontpage Exploit - Strange POST Payload
  • From: Kanatoko
• RE: [WEB SECURITY] PDF to JavaScript to XML to Exploit
  • From: Paul Noble
• [WEB SECURITY] Re: Can HTTP Request Smuggling be blocked by Web Application Firewalls?
  • From: Andrew van der Stock
• [WEB SECURITY] Re: Can HTTP Request Smuggling be blocked by Web Application Firewalls?
  • From: Amit Klein (AKsecurity)
• Re: [WEB SECURITY] Can HTTP Request Smuggling be blocked by Web Application Firewalls?
  • From: Amit Klein (AKsecurity)
• RE: [WEB SECURITY] PDF to JavaScript to XML to Exploit
  • From: Harwood, Deanne I
• [WEB SECURITY] WASC Distributed Open Proxy Honeypot Project - Call for Participants
  • From: Ryan Barnett
• Re: [WEB SECURITY] Frontpage Exploit - Strange POST Payload
  • From: Andrew Simmons
• [WEB SECURITY] Security Audit Software
  • From: dpw
• Re: [WEB SECURITY] Security Audit Software
  • From: Jeremiah Grossman
• Re: [WEB SECURITY] Security Audit Software
  • From: Peter Wood
• RE: [WEB SECURITY] Security Audit Software
  • From: dpw
• RE: [WEB SECURITY] Security Audit Software
  • From: Will Jefferies
• RE: [WEB SECURITY] Security Audit Software
  • From: Chris Weber
• Re: [WEB SECURITY] Security Audit Software
  • From: Bill Pennington
• RE: [WEB SECURITY] Security Audit Software
  • From: Chris Weber
• Re: [WEB SECURITY] Security Audit Software
  • From: Bill Pennington
• RE: [WEB SECURITY] Security Audit Software
  • From: Ory Segal
• Re: [WEB SECURITY] Security Audit Software
  • From: Pete Herzog
• Re: [WEB SECURITY] Security Audit Software
  • From: Richard Moore
• RE: [WEB SECURITY] Security Audit Software
  • From: Irene Abezgauz
• [WEB SECURITY] [IN]Secure Magazine v2 released
  • From: Bob Auger
• Re: [WEB SECURITY] Security Audit Software
  • From: Arin Komins
• RE: [WEB SECURITY] Security Audit Software
  • From: Chris Weber
• RE: [WEB SECURITY] Security Audit Software
  • From: Evans, Arian
• RE: [WEB SECURITY] Security Audit Software
  • From: Evans, Arian
• RE: [WEB SECURITY] Security Audit Software
  • From: Arin Komins
• [WEB SECURITY] WASC Articles Project - Call for Participants
  • From: robert
• [WEB SECURITY] Manual audits
  • From: John Muchow
• RE: [WEB SECURITY] Manual audits
  • From: zeno
• Re: [WEB SECURITY] magic_quotes
  • From: Pablo Fernández
• RE: [WEB SECURITY] Manual audits
  • From: Aiken, Dan
• RE: [WEB SECURITY] magic_quotes
  • From: dpw
• RE: [WEB SECURITY] Manual audits
  • From: Ross Lotharius
• RE: [WEB SECURITY] magic_quotes
  • From: Pablo Fernández
• [WEB SECURITY] OWASP-SoCal July Meeting Invitation
  • From: Kartik Trivedi
• RE: [WEB SECURITY] Security Audit Software
  • From: Evans, Arian
• [WEB SECURITY] red-herring articl about application firewalls
  • From: webappsec
• [WEB SECURITY] Http request smuggling's PCCA is netcache
  • From: Admin
• [WEB SECURITY] Call for Paritipation: C.I.P.H.E.R Contest
  • From: Maximillian Dornseif
• [WEB SECURITY] web app security policies?
  • From: Arin Komins
• [WEB SECURITY] Fwd: VRT Certified Rules Update: 2005-06-29
  • From: Ryan Barnett