The Web Security Mailing List (2008 December)

• Date Index

• [WEB SECURITY] How far can you go with Directory Traversal on IIS ?, Tri Huynh
• [WEB SECURITY] Collection of 2009 Security Predictions, robert
• [WEB SECURITY] WITOOL v0.1 released, 김영일
• [WEB SECURITY] Researchers create rogue CA certificate, robert
• [WEB SECURITY] [Administrative] List slowdown over the holidays, robert
• [WEB SECURITY] Helping Protect Cookies with HTTPOnly Flag using ModSecurity, Ryan Barnett
• [WEB SECURITY] Learning More About the Underground Economy: A Case-Study of Keyloggers and Dropzones, Mike Fratto
• [WEB SECURITY] Hackvertor video demo, gaz Heyes
• [WEB SECURITY] Execute with .CHM file, Simorgh Security
• [WEB SECURITY] [Tool] sqlmap 0.6.3 released, Bernardo Damele A. G.
• [WEB SECURITY] Burp Suite v1.2 released, PortSwigger
• Re: [WEB SECURITY] HTTPOnly Cookies Specification, Bil Corry
• [WEB SECURITY] Aspect9: Internet Explorer 8.0 Beta 2 Anti-XSS Filter Vulnerabilities, Rafel Ivgi
• [WEB SECURITY] Joomla Security Scanner, 7Lyrix
• [WEB SECURITY] How to disable File protocol in browsers, 7Lyrix
  • Re: [WEB SECURITY] How to disable File protocol in browsers, Christian Frichot
• [WEB SECURITY] Browser Security Handbook by Google, Simone Onofri
  • RE: [WEB SECURITY] Browser Security Handbook by Google, Bryan Hughes
    • Re: [WEB SECURITY] Browser Security Handbook by Google, Bil Corry
    • [WEB SECURITY] How good is Soft Token Generation on mobile, Khan, Meraj M
      • Re: [WEB SECURITY] How good is Soft Token Generation on mobile, Rafal @ IsHackingYou.com
      • Re: [WEB SECURITY] How good is Soft Token Generation on mobile, Brian Shura
      • Re: [WEB SECURITY] How good is Soft Token Generation on mobile, Nick Owen
  • <Possible follow-ups>
  • Re: [WEB SECURITY] Browser Security Handbook by Google, MustLive
• [WEB SECURITY] native client, Sam Quigley
• [WEB SECURITY] Breaking Google Gears' Cross-Origin Communication Model, Yair Amit
• RE: [WEB SECURITY] Solaris 10 Audit, Martin O'Neal
  • <Possible follow-ups>
  • Re: [WEB SECURITY] Solaris 10 Audit, varun chaudhry
• [WEB SECURITY] Javascript/JSON hijacking, deepak manohar
  • [WEB SECURITY] Solaris 10 Audit, KT
    • Re: [WEB SECURITY] Solaris 10 Audit, Dr. Dirk Wetter
• [WEB SECURITY] Whiltelist vs Blacklist for International (Unicode) characters, Prasad Shenoy
  • Re: [WEB SECURITY] Whiltelist vs Blacklist for International (Unicode) characters, Rafal @ IsHackingYou.com
    • RE: [WEB SECURITY] Whiltelist vs Blacklist for International (Unicode) characters, Bryan Sullivan
      • Re: [WEB SECURITY] Whiltelist vs Blacklist for International (Unicode) characters, Bil Corry
      • Re: [WEB SECURITY] Whiltelist vs Blacklist for International (Unicode) characters, Prasad Shenoy
    • Re: [WEB SECURITY] Whiltelist vs Blacklist for International (Unicode) characters, Arian J. Evans
  • Re: [WEB SECURITY] Whiltelist vs Blacklist for International (Unicode) characters, HASEGAWA Yosuke
    • Re: [WEB SECURITY] Whiltelist vs Blacklist for International (Unicode) characters, Prasad Shenoy
  • RE: [WEB SECURITY] Whiltelist vs Blacklist for International (Unicode) characters, Chris Weber \(Casaba Security\)
• [WEB SECURITY] Certified Secure Software Lifecycle Professional, Cristian Serban
  • Re: [WEB SECURITY] Certified Secure Software Lifecycle Professional, Rafal @ IsHackingYou.com
• [WEB SECURITY] Digital Certificates for Web-based Mobile Apps, Arun Sundaresh
  • Re: [WEB SECURITY] Digital Certificates for Web-based Mobile Apps, Nick Owen
• Re: [WEB SECURITY] SQL Injection and data integrity D4F-697, Simone Onofri
  • Re: [WEB SECURITY] SQL Injection and data integrity D4F-697, Patrick Madden
    • RE: [WEB SECURITY] SQL Injection and data integrity D4F-697, Hoffman, Billy
  • Re: [WEB SECURITY] SQL Injection and data integrity D4F-697, varun chaudhry
    • Re: [WEB SECURITY] SQL Injection and data integrity D4F-697, Simone Onofri
• [WEB SECURITY] Security Testing of Mobile Apps, Arun Sundaresh
  • RE: [WEB SECURITY] Security Testing of Mobile Apps, Hoffman, Billy
    • Re: [WEB SECURITY] Security Testing of Mobile Apps, Simone Onofri
    • Re: [WEB SECURITY] Security Testing of Mobile Apps, Arun Sundaresh
      • RE: [WEB SECURITY] Security Testing of Mobile Apps, Hoffman, Billy
      • Re: [WEB SECURITY] Security Testing of Mobile Apps, Simone Onofri
      • Re: [WEB SECURITY] Security Testing of Mobile Apps, Jeff Robertson
      • Re: [WEB SECURITY] Security Testing of Mobile Apps, Simone Onofri
      • [WEB SECURITY] Man In The Middle Attack (MITMA) on SSL, Khan, Meraj M
  • Re: [WEB SECURITY] Security Testing of Mobile Apps, varun chaudhry
• [WEB SECURITY] SQL Injection and data integrity, Dr. Dirk Wetter
  • <Possible follow-ups>
  • Re: [WEB SECURITY] SQL Injection and data integrity, tomb
    • Re: [WEB SECURITY] SQL Injection and data integrity, Simone Onofri
• Re: [WEB SECURITY] thoughts on two-factor web authentication?, Bil Corry
• [WEB SECURITY] Security certification, application.secure application.secure
  • Re: [WEB SECURITY] Security certification, James Landis
• [WEB SECURITY] Web app log monitoring, Albert
• [WEB SECURITY] [Tool] Powerfuzzer - introducing powerful and easy web fuzzing, Marcin Kozlowski
• [WEB SECURITY] How to perform security testing of mobile device apps?, Arun Sundaresh
• [WEB SECURITY] Web app log monitoring - what to look for and how often to look for it, McCown, Christian M
  • [WEB SECURITY] AW: Web app log monitoring - what to look for and how often to look for it, christian.folini
• [WEB SECURITY] vulnerabiltiy clasification, Luis Matus
  • Re: [WEB SECURITY] vulnerabiltiy clasification, Blain Smith
    • Re: [WEB SECURITY] vulnerabiltiy clasification, Prasad Shenoy
  • <Possible follow-ups>
  • Re: [WEB SECURITY] vulnerabiltiy clasification, MustLive
    • Re: [WEB SECURITY] vulnerabiltiy clasification, Prasad Shenoy
      • Re: [WEB SECURITY] vulnerabiltiy clasification, Luis Matus
      • Re: [WEB SECURITY] vulnerabiltiy clasification, Luis Matus
• Re: [WEB SECURITY] ClickJacking + CSRF attacking Web Application, Rafal @ IsHackingYou.com
  • <Possible follow-ups>
  • Re: [WEB SECURITY] ClickJacking + CSRF attacking Web Application, MustLive