The Web Security Mailing List (2006 August)
- [WEB SECURITY] Doorman@JUMPERZ.NET Released,
Kanatoko
- [WEB SECURITY] AT&T Online store hacked (19,000 exposed CC #'s),
Jeremiah Grossman
- [WEB SECURITY] MySpace "private" profiles unmasked,
Jeremiah Grossman
- [WEB SECURITY] Time Parameter For Expiration of the Session,
Bergel B, Gabriel
- RE: [WEB SECURITY] Resources for testing hosted/ASP sites,
Evans, Arian
- [WEB SECURITY] Hacme Casino v1.0,
alex.smolen
- [WEB SECURITY] Re: Problem about detecting "SMTP command injection", i.e. cr lf chars in web forms,
Jorge Augusto Senger
- [WEB SECURITY] Problem about detecting "SMTP command injection", i.e. cr lf chars in web forms,
Maxime Ducharme
- [WEB SECURITY] RE: Environment for testing WebApp Security Scanners,
Evans, Arian
[WEB SECURITY] WiKID 2.1.1 released,
Nick Owen
[WEB SECURITY] Google Redirect URL actively used for Phishing,
Jeremiah Grossman
[WEB SECURITY] Mitnick's website hacked (again),
Jeremiah Grossman
[WEB SECURITY] DDOS extortion,
Brian Eaton
[WEB SECURITY] Corsaire White Paper: Assessing Java Clients with the BeanShell,
Stephen de Vries
[WEB SECURITY] RE: World Summit on Intrusion Prevention,
Anthony J Biacco
[WEB SECURITY] World Summit on Intrusion Prevention,
wsip
[WEB SECURITY] Technical note by Amit Klein: "Sending arbitrary HTTP requests with Flash 7/8 (+IE 6.0)",
Amit Klein (AKsecurity)
[WEB SECURITY] Registration Now Open!: 3rd Annual US OWASP AppSec Conference - Oct 16-18 2006 - Seattle, WA,
Dave Wichers
[WEB SECURITY] [Fwd: InterScout Web Forensics Tool Released as Freeware],
Nick Owen
[WEB SECURITY] "hack-me" Ajax apps?,
Jeff Robertson
[WEB SECURITY] Technical note: under some conditions, it's possible to steal HTTP credentials using Flash,
Amit Klein (AKsecurity)
[WEB SECURITY] (somewhat) breaking the same-origin policy by undermining dns-pinning,
Martin Johns
[WEB SECURITY] Re: [Full-disclosure] Re: [WEB SECURITY] Top sites for Application security news,
sick b0y
[WEB SECURITY] Bypassing script filters with variable-width encodings,
Chris Weber
[WEB SECURITY] Web app ? : Lieberman's site,
Matt Fisher
RE: [WEB SECURITY] Secure coding guidelines,
Ory Segal
[WEB SECURITY] Top sites for Application security news,
KT
[WEB SECURITY] Sending multipart/form-data requests from Flash (with arbitrary headers),
Amit Klein (AKsecurity)
[WEB SECURITY] Ruby On Rails 1.1.5 Released to Address Critical Vulnerability,
bugtraq
[WEB SECURITY] Article about HttpOnly,
Evert | Collab
[WEB SECURITY] Announcement: Feed Injection in Web 2.0: Hacking RSS and Atom Feed Implementations [Whitepaper],
SPI Labs
[WEB SECURITY] Autocomplete attribute,
Benjamin Hawkes-Lewis
Re: [WEB SECURITY] Detecting, Analyzing, and Exploiting Intranet Applications using JavaScript,
Chris Hofmann
[WEB SECURITY] XSS at Netcraft.com,
Valery Marchuk
[WEB SECURITY] [Administrative] List slow down,
robert
Re: [WEB SECURITY] JavaScript Malware, port scanning, and beyond,
Amit Klein (AKsecurity)
Brought to you by http://www.webappsec.org