The Web Security Mailing List (2009 March)

• Date Index

• [WEB SECURITY] OWASP Code Review, Kate Hartmann
• [WEB SECURITY] winAUTOPWN - Now you can sleep, QUAKER DOOMER
• Re: [WEB SECURITY] SLQ Injection - Website, Daniel Herrera
• [WEB SECURITY] websense remote filter, Sitaram Chamarty
  • [WEB SECURITY] SLQ Injection - Website, Tomás Lombardini
• [WEB SECURITY] Critical european webmails vulnerability, Rosario Valotta
• [WEB SECURITY] Microsoft Internet Explorer 8 - Anti Spoofing is a Myth, Aditya K Sood
  • Re: [WEB SECURITY] Microsoft Internet Explorer 8 - Anti Spoofing is a Myth, Stefano Paluello
    • Re: [WEB SECURITY] Microsoft Internet Explorer 8 - Anti Spoofing is a Myth, Esam Gharish
    • RE: [WEB SECURITY] Microsoft Internet Explorer 8 - Anti Spoofing is a Myth, Al Stokka
      • RE: [WEB SECURITY] Microsoft Internet Explorer 8 - Anti Spoofing is a Myth, Purvis Robert (NHS Connecting for Health)
• [WEB SECURITY] Software Assurance Maturity Model 1.0 released!, Pravir Chandra
  • [WEB SECURITY] OWASP Podcast #14 - Pravir Chandra and OpenSAMM, Jim Manico
• [WEB SECURITY] XSS Rays, gaz Heyes
• [WEB SECURITY] [tool release] Watcher v1.0.0 - silent Web-app security testing and compliance auditing, Chris Weber
• [WEB SECURITY] HP SWFScan - Free Flash Security Tool, Hoffman, Billy
  • Re: [WEB SECURITY] HP SWFScan - Free Flash Security Tool, lists
    • RE: [WEB SECURITY] HP SWFScan - Free Flash Security Tool, Hoffman, Billy
  • Re: [WEB SECURITY] HP SWFScan - Free Flash Security Tool, Arian J. Evans
    • RE: [WEB SECURITY] HP SWFScan - Free Flash Security Tool, Schmidt, Chris
      • Re: [WEB SECURITY] HP SWFScan - Free Flash Security Tool, Carl Vincent
      • RE: [WEB SECURITY] HP SWFScan - Free Flash Security Tool, Hoffman, Billy
  • Re: [WEB SECURITY] HP SWFScan - Free Flash Security Tool, fukami
• [WEB SECURITY] Microsoft releases source code scanning & fuzzing tool, Arian J. Evans
  • Re: [WEB SECURITY] Microsoft releases source code scanning & fuzzing tool, list
    • Re: [WEB SECURITY] Microsoft releases source code scanning & fuzzing tool, Arian J. Evans
  • Re: [WEB SECURITY] Microsoft releases source code scanning & fuzzing tool, Michael Condon
    • Re: [WEB SECURITY] Microsoft releases source code scanning & fuzzing tool, john smith
• [WEB SECURITY] OWASP Security Spending Benchmarks Report, Jeremiah Grossman
• [WEB SECURITY] ProxyStrike v2.0 released, Christian Martorella
• [WEB SECURITY] List of real 'cloud security' attacks?, robert
  • Re: [WEB SECURITY] List of real 'cloud security' attacks?, Craig Ingram
  • Re: [WEB SECURITY] List of real 'cloud security' attacks?, Andre Gironda
    • Re: [WEB SECURITY] List of real 'cloud security' attacks?, Andy Steingruebl
      • Re: [WEB SECURITY] List of real 'cloud security' attacks?, Andre Gironda
• [WEB SECURITY] OWASP in DoD/IC ?, Stephen Carter
• [WEB SECURITY] Response Header Name Injection Attack, Cyrill Brunschwiler
  • Re: [WEB SECURITY] Response Header Name Injection Attack, romain
  • RE: [WEB SECURITY] Response Header Name Injection Attack, Chris Weber
• [WEB SECURITY] Early bird for OWASP European AppSec 2009 conference!, Seba
• [WEB SECURITY] [SecNiche Whitepaper] Evading Web XSS Filters with Microsoft Word - WAPT Perspective, Aditya K Sood
• [WEB SECURITY] Proxy Attack Stupid Buzzword Contest, robert
• [WEB SECURITY] Paper: Socket Capable Browser Plugins Result In Transparent Proxy Abuse, robert
• [WEB SECURITY] Staring Into The Abyss prepaper, Dan Kaminsky
• [WEB SECURITY] 20 ways to php Source code fuzzing (Auditing), Simorgh Security
• Re: [WEB SECURITY] "Enterprise Web Application Security Program"... necessary steps, Arian J. Evans
  • Re: [WEB SECURITY] "Enterprise Web Application Security Program"... necessary steps, Rafal @ IsHackingYou.com
    • Re: [WEB SECURITY] "Enterprise Web Application Security Program"... necessary steps, Steven M. Christey
      • Re: [WEB SECURITY] "Enterprise Web Application Security Program"... necessary steps, Rafal @ IsHackingYou.com
      • Message not available
      • Re: [WEB SECURITY] "Enterprise Web Application Security Program"... necessary steps, Rafal @ IsHackingYou.com
    • Re: [WEB SECURITY] "Enterprise Web Application Security Program"... necessary steps, Arian J. Evans
    • Re: [WEB SECURITY] "Enterprise Web Application Security Program"... necessary steps, Pravir Chandra
      • Re: [WEB SECURITY] "Enterprise Web Application Security Program"... necessary steps, Arian J. Evans
      • Re: [WEB SECURITY] "Enterprise Web Application Security Program"... necessary steps, Pravir Chandra
      • Re: [WEB SECURITY] "Enterprise Web Application Security Program"... necessary steps, Jim Manico
• Re: [WEB SECURITY] "Enterprise Web Application Security Program"... baby steps, Pravir Chandra
  • Re: [WEB SECURITY] "Enterprise Web Application Security Program"... baby steps, Craig Ingram
    • Re: [WEB SECURITY] "Enterprise Web Application Security Program"... baby steps, Pravir Chandra
• [WEB SECURITY] Cross-Site Scripting PCI Question, Joe Hargrove
  • RE: [WEB SECURITY] Cross-Site Scripting PCI Question, Schmidt, Chris
  • RE: [WEB SECURITY] Cross-Site Scripting PCI Question, Cook, Geoffrey
    • Re: [WEB SECURITY] Cross-Site Scripting PCI Question, Raymond Forbes
      • Re: [WEB SECURITY] Cross-Site Scripting PCI Question, Trey Ford
      • Re: [WEB SECURITY] Cross-Site Scripting PCI Question, Raymond Forbes
      • RE: [WEB SECURITY] Cross-Site Scripting PCI Question, Greg Sparrow
  • Re: [WEB SECURITY] Cross-Site Scripting PCI Question, Trey Ford
    • Re: [WEB SECURITY] Cross-Site Scripting PCI Question, T.C. Niedzialkowski
• [WEB SECURITY] RE: fuzzy testing, John Johnson
  • Re: [WEB SECURITY] fuzzy testing, 7Lyrix
  • <Possible follow-ups>
  • [WEB SECURITY] RE: fuzzy testing, Ari Takanen
• [WEB SECURITY] 3/5 Denver, CO, Tom Brennan - Proactive Risk
• [WEB SECURITY] WASC Threat Classification v2 Project - Call for Participants, robert
• [WEB SECURITY] Active Man in the Middle Attacks, Adi Sharabani
  • Re: [WEB SECURITY] Active Man in the Middle Attacks, Bil Corry
    • Re: [WEB SECURITY] Active Man in the Middle Attacks, Adi Sharabani
      • Re: [WEB SECURITY] Active Man in the Middle Attacks, Shane Kelly
      • Re: [WEB SECURITY] Active Man in the Middle Attacks, Adi Sharabani