The Web Security Mailing List (2007 October)

• Date Index

• [WEB SECURITY] ModSecurity 2.1.4-rc2 is now available, Ofer Shezaf
• [WEB SECURITY] [Administrative] Server Maintenance, robert
• [WEB SECURITY] Hackvertor becomes all powerful, gaz_sec
• [WEB SECURITY] Inter-company scanning quandary - Part 2, an_itsec_guy
• [WEB SECURITY] web client fuzzer.py, pdp (architect)
  • Re: [WEB SECURITY] web client fuzzer.py, Thierry Zoller
• [WEB SECURITY] Web Application Security Professionals Survey (Oct 2007), Jeremiah Grossman
  • Re: [WEB SECURITY] Web Application Security Professionals Survey (Oct 2007), Jeremiah Grossman
• [WEB SECURITY] Breach coctail party at the OWASP/WASC conference in SJ, Ofer Shezaf
• [WEB SECURITY] Microsoft releases XSSDetect code analysis, Chris Weber (Casaba Security)
  • RE: [WEB SECURITY] Microsoft releases XSSDetect code analysis, Eugene Siu
• [WEB SECURITY] Technika 1.3, pdp (architect)
• [WEB SECURITY] The Web Application Hacker's Handbook, PortSwigger
  • Re: [WEB SECURITY] The Web Application Hacker's Handbook, Bill Pennington
• [WEB SECURITY] Testing Strategy, ανδΗ
  • Re: [WEB SECURITY] Testing Strategy, Dinis Cruz
  • Re: [WEB SECURITY] Testing Strategy, Victor Shamanovsky
    • Re: [WEB SECURITY] Testing Strategy, ανδΗ
      • Re: [WEB SECURITY] Testing Strategy, Christian Bockermann
• [WEB SECURITY] [TOOL] w3af - Web Application Attack and Audit Framework, Andres Riancho
• [WEB SECURITY] Favorites Feature May Allow Phishing, robert
  • RE: [WEB SECURITY] Favorites Feature May Allow Phishing, Hoffman, Billy
• [WEB SECURITY] Whitepaper(SecNiche) : Paradox of Web Leeching, Aditya K Sood
  • Re: [WEB SECURITY] Whitepaper(SecNiche) : Paradox of Web Leeching, Andre Gironda
    • Re: [WEB SECURITY] Whitepaper(SecNiche) : Paradox of Web Leeching, Aditya K Sood (0kn0ck)
• [WEB SECURITY] New version of Hackvertor, gaz_sec
• [WEB SECURITY] Latest web hacking incidents, Ofer Shezaf
• [WEB SECURITY] CfP for OWASP Israel conference 2007, Dec 3rd 2007, Ofer Shezaf
• [WEB SECURITY] XML script injection, gaz_sec
• [WEB SECURITY] Renaissance, pdp (architect)
• [WEB SECURITY] Detect NoScript POC, ascii
• [WEB SECURITY] xkcd: Exploits of a Mom (SQL injection humor), Joe White
• [WEB SECURITY] Some unanswered website vulnerability questions, Jeremiah Grossman
• [WEB SECURITY] Help needed explaining SSL cipher suite strength to non-security administrators, Neil Smithline
  • RE: [WEB SECURITY] Help needed explaining SSL cipher suite strength to non-security administrators, Martin O'Neal
  • Message not available
    • Re: [WEB SECURITY] Help needed explaining SSL cipher suite strength to non-security administrators, Neil Smithline
• Re: [WEB SECURITY] Application Security Training, Zed Qyves
• [WEB SECURITY] Website Vulnerability Disclosure Stances, robert
  • Re: [WEB SECURITY] Website Vulnerability Disclosure Stances, jross
  • Re: [WEB SECURITY] Website Vulnerability Disclosure Stances, Andy Steingruebl
  • Re: [WEB SECURITY] Website Vulnerability Disclosure Stances, Chris Weber (Casaba Security)
    • Re: [WEB SECURITY] Website Vulnerability Disclosure Stances, dm
      • Re: [WEB SECURITY] Website Vulnerability Disclosure Stances, Esam Gharish
  • Re: [WEB SECURITY] Website Vulnerability Disclosure Stances, eric
• [WEB SECURITY] Inter-company scanning quandary, an_itsec_guy
  • Re: [WEB SECURITY] Inter-company scanning quandary, jross
  • RE: [WEB SECURITY] Inter-company scanning quandary, Martin O'Neal
  • Re: [WEB SECURITY] Inter-company scanning quandary, Mike Fratto
  • RE: [WEB SECURITY] Inter-company scanning quandary, Eric Rachner
    • RE: [WEB SECURITY] Inter-company scanning quandary, Schmidt, Albert E
  • RE: [WEB SECURITY] Inter-company scanning quandary, Yeager, Joe (HP Software ASC)
    • RE: [WEB SECURITY] Inter-company scanning quandary, Schmidt, Albert E
  • Re: [WEB SECURITY] Inter-company scanning quandary, Ryan Barnett
    • RE: [WEB SECURITY] Inter-company scanning quandary, Martin O'Neal
    • Message not available
      • Re: [WEB SECURITY] Inter-company scanning quandary, Ryan Barnett
      • RE: [WEB SECURITY] Inter-company scanning quandary, Martin O'Neal
  • RE: [WEB SECURITY] Inter-company scanning quandary, Schmidt, Albert E
    • Message not available
      • RE: [WEB SECURITY] Inter-company scanning quandary, Schmidt, Albert E
• [WEB SECURITY] CSRF and sending the returned content elsewhere, Jamuse
  • RE: [WEB SECURITY] CSRF and sending the returned content elsewhere, Eric Rachner
    • RE: [WEB SECURITY] CSRF and sending the returned content elsewhere, Valentin Crettaz
      • RE: [WEB SECURITY] CSRF and sending the returned content elsewhere, eric
      • RE: [WEB SECURITY] CSRF and sending the returned content elsewhere, Valentin Crettaz
      • RE: [WEB SECURITY] CSRF and sending the returned content elsewhere, eric
  • <Possible follow-ups>
  • RE: [WEB SECURITY] CSRF and sending the returned content elsewhere, Tom Stripling
• Re: [WEB SECURITY] metrics for testing/evaluating Web-Security-Scanners on?, Arian J. Evans
  • Re: [WEB SECURITY] metrics for testing/evaluating Web-Security-Scanners on?, Andre Gironda
• Re: [WEB SECURITY] scanner reviews, testing news, Andre Gironda
  • Re: [WEB SECURITY] scanner reviews, testing news, Adam Muntner
    • Re: [WEB SECURITY] scanner reviews, testing news, Arian J. Evans
  • Re: [WEB SECURITY] scanner reviews, testing news, Arian J. Evans
  • <Possible follow-ups>
  • Re: [WEB SECURITY] scanner reviews, testing news, Martin Johns
• RE: [WEB SECURITY] Appropriate platform for testing/evaluating Web-Security-Scanners on?, zappista holland
  • Re: [WEB SECURITY] Appropriate platform for testing/evaluating Web-Security-Scanners on?, Arian J. Evans
    • Re: [WEB SECURITY] Appropriate platform for testing/evaluating Web-Security-Scanners on?, Andre Gironda