Re: [WEB SECURITY] Beginner in Security world...

[bugtraq@xxxxxxxxxxxxxxx]

> I think WASC has needed this for a long time, really. There's some darn good
> advice on the list, but almost always the same few starting basics.
> 
> We need a good list of all the sample hackme and learning apps out there
> too, probably as part of this.

If someone has the time to throw this together I'd be happy to include it on the site
and properly credit the author. I personally lack the time to do this :/. 

> Then of course someone needs to find all the vulns and issues with all those
> apps in source and runtime (Andy?) and publsh a master key. :)
> 
> That would be a super cool project for an eager aspiring college kid without
> a job.

If you know of anyone, or anyone on this list is interested please email robert @ webappsec . org

- Robert


> 
> -- 
> Arian Evans
> 
> 
> 
> On Wed, Dec 30, 2009 at 10:24 AM, Andy Steingruebl <steingra@xxxxxxxxx>wrote:
> 
> > On Wed, Dec 30, 2009 at 12:47 AM, Mostafa Siraj <mostafa.siraj@xxxxxxxxx>wrote:
> >
> >> Hello balaji
> >>
> >> please check the mailing list archive, you'll find this request
> >> answered hundreds of times [?]
> >>
> >
> > Might I  suggest we make an FAQ somewhere then?  If this keeps coming up
> > and there isn't an easy place to find an answer, it might be helpful to put
> > one together...
> >
> > I'd even be willing to help :)
> >
> > --
> > Andy
> >
> >
> 
> --0050450159f4d2f2fc047bf6ac06
> Content-Type: text/html; charset=ISO-8859-1
> Content-Transfer-Encoding: quoted-printable
> 
> I think WASC has needed this for a long time, really. There&#39;s some darn=
>  good advice on the list, but almost always the same few starting basics.<b=
> r><br>We need a good list of all the sample hackme and learning apps out th=
> ere too, probably as part of this.<br>
> <br>Then of course someone needs to find all the vulns and issues with all =
> those apps in source and runtime (Andy?) and publsh a master key. :)<br><br=
> >That would be a super cool project for an eager aspiring college kid witho=
> ut a job.<br>
> <br clear=3D"all">-- <br>Arian Evans<br><br>
> <br><br><div class=3D"gmail_quote">On Wed, Dec 30, 2009 at 10:24 AM, Andy S=
> teingruebl <span dir=3D"ltr">&lt;<a href=3D"mailto:steingra@xxxxxxxxx";>stei=
> ngra@xxxxxxxxx</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" s=
> tyle=3D"border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8e=
> x; padding-left: 1ex;">
> <div class=3D"gmail_quote"><div class=3D"im">On Wed, Dec 30, 2009 at 12:47 =
> AM, Mostafa Siraj <span dir=3D"ltr">&lt;<a href=3D"mailto:mostafa.siraj@gma=
> il.com" target=3D"_blank">mostafa.siraj@xxxxxxxxx</a>&gt;</span> wrote:<br>=
> <blockquote class=3D"gmail_quote" style=3D"border-left: 1px solid rgb(204, =
> 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
> 
> <div dir=3D"ltr"><div>Hello balaji</div><div><br></div>please check the mai=
> ling list archive, you&#39;ll find this request answered=A0hundreds of time=
> s=A0<img src=3D"cid:330@xxxxxxxxxxxxx"; style=3D"margin: 0px 0.2ex; vertical=
> -align: middle;" goomoji=3D"330"><div>
> 
> </div></div></blockquote></div><div><br>Might I=A0 suggest we make an FAQ s=
> omewhere then?=A0 If this keeps coming up and there isn&#39;t an easy place=
>  to find an answer, it might be helpful to put one together...<br><br>I&#39=
> ;d even be willing to help :)<br>
> 
> </div><br>--<br>Andy<br><br>
> </div>
> </blockquote></div><br>
> 
> --0050450159f4d2f2fc047bf6ac06--
> --0050450159f4d2f301047bf6ac07
> Content-Type: image/gif; name="330.gif"
> Content-Transfer-Encoding: base64
> X-Attachment-Id: 330@xxxxxxxxxxxxx
> Content-ID: <330@xxxxxxxxxxxxx>
> 
> R0lGODlhDAAMAKIFAF5LAP/zxAAAANyuAP/gaP///wAAAAAAACH5BAEAAAUALAAAAAAMAAwAAAMl
> WLPcGjDKFYi9lxKBOaGcF35DhWHamZUW0K4mAbiwWtuf0uxFAgA7
> --0050450159f4d2f301047bf6ac07--
> 


----------------------------------------------------------------------------
Join us on IRC: irc.freenode.net #webappsec

Have a question? Search The Web Security Mailing List Archives: 
http://www.webappsec.org/lists/websecurity/archive/

Subscribe via RSS: 
http://www.webappsec.org/rss/websecurity.rss [RSS Feed]

Join WASC on LinkedIn
http://www.linkedin.com/e/gis/83336/4B20E4374DBA