Most recent messages
315 messages sorted by: [ author ] [ date ] [ subject ]

Starting: Sat Jul 01 2006 - 22:43:49 CDT
Ending: Thu Sep 28 2006 - 17:25:29 CDT

• Re: Webscarab how to? Rogan Dawes (Sat Jul 01 2006 - 09:46:30 CDT)
  • Re: Webscarab how to? Rogan Dawes (Tue Jul 04 2006 - 08:03:34 CDT)
  • Re: RE: Re: Webscarab how to? c0redumpackers.org.uk (Sun Jul 09 2006 - 06:48:27 CDT)
  • Re: Webscarab how to? Rogan Dawes (Sun Jul 09 2006 - 14:25:43 CDT)
  • Re: Re: Webscarab how to? mr.nastyix.netcom.com (Mon Jul 03 2006 - 09:00:40 CDT)
  • RE: Re: Webscarab how to? PPowenskioag.com (Mon Jul 03 2006 - 09:34:10 CDT)
  • Re: RE: Re: Webscarab how to? f_keniskyearthlink.net (Fri Jul 07 2006 - 12:03:56 CDT)
• RE: Two-Factor Authentication on the Web Gaydosh, Adam (Sun Jul 02 2006 - 17:09:41 CDT)
  • RE: Two-Factor Authentication on the Web Glenn.Everhartchase.com (Mon Jul 03 2006 - 07:43:48 CDT)
  • RE: Two-Factor Authentication on the Web Popowycz, Alex (Mon Jul 03 2006 - 08:35:25 CDT)
  • RE: Two-Factor Authentication on the Web Lyal Collins (Mon Jul 03 2006 - 16:06:28 CDT)
  • RE: Two-Factor Authentication on the Web Lyal Collins (Wed Jul 05 2006 - 07:25:22 CDT)
  • RE: Two-Factor Authentication on the Web Popowycz, Alex (Wed Jul 05 2006 - 06:41:41 CDT)
  • RE: Two-Factor Authentication on the Web James Pujals (Wed Jul 05 2006 - 09:59:27 CDT)
  • RE: Two-Factor Authentication on the Web PPowenskioag.com (Thu Jul 06 2006 - 01:34:45 CDT)
• Re: Two-Factor Authentication on the Web Andrew van der Stock (Mon Jul 03 2006 - 08:59:44 CDT)
  • Re: Two-Factor Authentication on the Web mikeiscool (Thu Jul 06 2006 - 21:25:53 CDT)
  • Re: Two-Factor Authentication on the Web Devdas Bhagat (Mon Jul 17 2006 - 03:08:00 CDT)
• Cross Site Scripting in Google RSnake (Tue Jul 04 2006 - 23:55:01 CDT)
• Re: [WEB SECURITY] Cross Site Scripting in Google bugtraqcgisecurity.net (Wed Jul 05 2006 - 07:49:33 CDT)
  • Re: [WEB SECURITY] Cross Site Scripting in Google Collin Jackson (Wed Jul 05 2006 - 15:10:45 CDT)
  • Re: [WEB SECURITY] Cross Site Scripting in Google RSnake (Wed Jul 05 2006 - 13:01:15 CDT)
  • Re: [WEB SECURITY] Cross Site Scripting in Google RSnake (Thu Jul 06 2006 - 11:23:08 CDT)
• Re: [Full-disclosure] Re: [WEB SECURITY] Cross Site Scripting in Google Javor Ninov (Wed Jul 05 2006 - 23:59:45 CDT)
• RE: [Full-disclosure] Re: [WEB SECURITY] Cross Site Scripting in Google Martin O'Neal (Thu Jul 06 2006 - 06:34:50 CDT)
• DMZ and critical data Pedro Henrique Morsch Mazzoni (Fri Jul 07 2006 - 09:22:52 CDT)
  • Re: DMZ and critical data è“�牙 (Sun Jul 09 2006 - 03:37:31 CDT)
  • Re: DMZ and critical data sarbanhatkckish.co.ir (Sun Jul 09 2006 - 02:52:39 CDT)
  • Re: DMZ and critical data Ken Adler - QDSP, CISSP, PMP, CISA (Sun Jul 09 2006 - 15:58:18 CDT)
  • RE: DMZ and critical data Brian J. Bartlett (Sun Jul 09 2006 - 09:57:13 CDT)
  • Re: DMZ and critical data Mohammad Ali Sarbanha (Mon Jul 10 2006 - 00:11:43 CDT)
• RFID and Banking Chris Chandler (Fri Jul 07 2006 - 10:51:45 CDT)
• Intrusion Detection David Robert (Sun Jul 09 2006 - 21:45:43 CDT)
  • Re: Intrusion Detection Ivan Ristic (Mon Jul 10 2006 - 03:30:34 CDT)
  • RE: Intrusion Detection Jeremy_Powellsbcss.k12.ca.us (Mon Jul 10 2006 - 12:31:43 CDT)
  • Re: Intrusion Detection Jamie Riden (Mon Jul 10 2006 - 15:35:48 CDT)
  • Re: Intrusion Detection Daniel Cid (Mon Jul 10 2006 - 20:50:23 CDT)
  • Re: Intrusion Detection David Ryan (Tue Jul 11 2006 - 18:52:25 CDT)
  • Re: Intrusion Detection skarvin (Mon Jul 10 2006 - 03:19:41 CDT)
• How to perform SSL certificate validation ? Nagareshwar Talekar (Mon Jul 10 2006 - 10:58:40 CDT)
  • Re: How to perform SSL certificate validation ? Ron (Mon Jul 10 2006 - 14:12:00 CDT)
  • RE: How to perform SSL certificate validation ? Dominick Baier (Mon Jul 10 2006 - 16:46:31 CDT)
  • Re: How to perform SSL certificate validation ? Nagareshwar Talekar (Tue Jul 11 2006 - 12:12:53 CDT)
  • Re: How to perform SSL certificate validation ? Max (Tue Jul 11 2006 - 09:27:49 CDT)
  • Re: How to perform SSL certificate validation ? Nagareshwar Talekar (Thu Jul 13 2006 - 13:20:14 CDT)
  • Re: How to perform SSL certificate validation ? Jason (Sat Jul 15 2006 - 22:15:04 CDT)
• How to perform SSL certificate validation ? Nagareshwar Talekar (Mon Jul 10 2006 - 13:16:16 CDT)
  • RE: How to perform SSL certificate validation ? Wall, Kevin (Mon Jul 10 2006 - 19:11:19 CDT)
  • Re: How to perform SSL certificate validation ? paseidon76yahoo.com (Tue Jul 11 2006 - 09:27:56 CDT)
• RE: [Full-disclosure] Re: [WEB SECURITY] Cross Site Scripting in Google tcp fin (Mon Jul 10 2006 - 23:29:38 CDT)
  • RE: [Full-disclosure] Re: [WEB SECURITY] Cross Site Scripting in Google PPowenskioag.com (Tue Jul 11 2006 - 08:30:25 CDT)
• Oracle SQL Injection Mark Keegan (Tue Jul 11 2006 - 06:26:05 CDT)
  • Re: Oracle SQL Injection Tim (Tue Jul 11 2006 - 17:24:32 CDT)
  • Re: Oracle SQL Injection Cesar (Tue Jul 11 2006 - 17:53:12 CDT)
  • Re: Oracle SQL Injection Andrew van der Stock (Tue Jul 11 2006 - 18:05:25 CDT)
  • RE: Oracle SQL Injection Mark Keegan (Tue Jul 11 2006 - 21:15:12 CDT)
  • Re: Oracle SQL Injection Tim (Tue Jul 11 2006 - 21:31:12 CDT)
  • RE: Oracle SQL Injection Mark Keegan (Tue Jul 11 2006 - 21:59:23 CDT)
  • RE: Oracle SQL Injection Integrigy (Wed Jul 12 2006 - 08:48:14 CDT)
  • Re: Oracle SQL Injection Esteban Martinez Fayo (Wed Jul 12 2006 - 15:44:01 CDT)
• Fwd: How to perform SSL certificate validation ? Mugdha Bendre (Tue Jul 11 2006 - 17:58:36 CDT)
  • Re: Fwd: How to perform SSL certificate validation ? Devdas Bhagat (Sun Jul 30 2006 - 07:47:38 CDT)
• Convenience or just bad design? Saqib Ali (Tue Jul 11 2006 - 21:30:46 CDT)
  • RE: Convenience or just bad design? Robert D. Holtz (Wed Jul 12 2006 - 09:24:21 CDT)
• Directed phishing attacks- protection methods Joshua Perrymon (Tue Jul 11 2006 - 22:41:32 CDT)
• Preliminary CFP:The 2nd International Conference on Availability, Reliability and Security (ARES 07), Vienna, Austria, April 10-13, 2007 Manh Tho (Wed Jul 12 2006 - 17:39:22 CDT)
• Is there an Open Source Vulnerability Analysis Framework? Steve Armstrong (Fri Jul 14 2006 - 19:23:03 CDT)
  • Re: Is there an Open Source Vulnerability Analysis Framework? killy (Sun Jul 16 2006 - 12:50:53 CDT)
  • Re: Is there an Open Source Vulnerability Analysis Framework? Gareth Davies (Mon Jul 17 2006 - 03:12:28 CDT)
  • Re: Is there an Open Source Vulnerability Analysis Framework? Christian Martorella (Mon Jul 17 2006 - 06:12:27 CDT)
• PacSec 2006 CALL FOR PAPERS (Deadline Aug. 4; Event Nov. 27-30) Dragos Ruiu (Mon Jul 17 2006 - 12:16:26 CDT)
• RUXCON 2006 Final Call For Papers cfpruxcon.org.au (Mon Jul 17 2006 - 23:17:33 CDT)
• Cookies as the second factor Jeff Robertson (Tue Jul 18 2006 - 07:45:12 CDT)
  • Re: Cookies as the second factor Rogan Dawes (Tue Jul 18 2006 - 09:47:18 CDT)
  • Re: Cookies as the second factor Nick Owen (Tue Jul 18 2006 - 10:00:28 CDT)
  • Re: Cookies as the second factor Ryan Barnett (Tue Jul 18 2006 - 09:50:58 CDT)
  • Re: Cookies as the second factor Robin Wood (Tue Jul 18 2006 - 10:02:51 CDT)
  • Re: Cookies as the second factor Rogan Dawes (Tue Jul 18 2006 - 10:54:02 CDT)
  • Re: Cookies as the second factor Andrew van der Stock (Tue Jul 18 2006 - 11:00:06 CDT)
  • RE: Cookies as the second factor Randy Ollett (Tue Jul 18 2006 - 10:59:41 CDT)
  • RE: Cookies as the second factor Jeff Robertson (Tue Jul 18 2006 - 12:01:20 CDT)
  • Re: Cookies as the second factor Ryan Barnett (Tue Jul 18 2006 - 11:55:12 CDT)
  • RE: Cookies as the second factor Andrew Chong (Tue Jul 18 2006 - 12:18:44 CDT)
  • RE: Cookies as the second factor Matt Fisher (Tue Jul 18 2006 - 15:46:16 CDT)
  • RE: Cookies as the second factor Matt Fisher (Tue Jul 18 2006 - 15:45:22 CDT)
  • Re: Cookies as the second factor Darren Bounds (Tue Jul 18 2006 - 13:06:06 CDT)
  • RE: Cookies as the second factor Ken Kousky (Tue Jul 18 2006 - 18:45:29 CDT)
  • Re: Cookies as the second factor mikeiscool (Tue Jul 18 2006 - 20:28:03 CDT)
  • Re: Cookies as the second factor Darren Bounds (Tue Jul 18 2006 - 21:06:37 CDT)
  • RE: Cookies as the second factor Arian J. Evans (Thu Jul 20 2006 - 13:00:31 CDT)
  • RE: Cookies as the second factor Jeff Robertson (Thu Jul 20 2006 - 13:08:22 CDT)
  • Re: Cookies as the second factor Robert Hajime Lanning (Thu Jul 20 2006 - 20:33:11 CDT)
  • Re: Cookies as the second factor Peter Watkins (Fri Jul 21 2006 - 10:04:50 CDT)
  • Re: Cookies as the second factor Eoin (Tue Jul 25 2006 - 09:21:03 CDT)
  • RE: Cookies as the second factor Arian J. Evans (Tue Jul 25 2006 - 10:21:09 CDT)
• Disable SSL v2 ciphers on IIS 5.0 secmail.listsgmail.com (Tue Jul 18 2006 - 15:52:34 CDT)
  • Re: Disable SSL v2 ciphers on IIS 5.0 Eoin Miller (Wed Jul 19 2006 - 07:39:06 CDT)
  • RE: Disable SSL v2 ciphers on IIS 5.0 Doug Markiewicz (Wed Jul 19 2006 - 09:11:51 CDT)
  • RE: Disable SSL v2 ciphers on IIS 5.0 xxradar (Thu Jul 20 2006 - 08:22:10 CDT)
• Protecting posted variables billy.sailinggmail.com (Fri Jul 21 2006 - 00:31:01 CDT)
  • Re: Protecting posted variables Serg B. (Fri Jul 21 2006 - 00:55:03 CDT)
  • RE: Protecting posted variables Andrew Chong (Fri Jul 21 2006 - 01:00:54 CDT)
  • Re: Protecting posted variables mikeiscool (Fri Jul 21 2006 - 01:02:44 CDT)
  • RE: Protecting posted variables Damhuis Anton (Fri Jul 21 2006 - 01:04:45 CDT)
  • Re: Protecting posted variables Rogan Dawes (Fri Jul 21 2006 - 00:52:11 CDT)
  • Re: Protecting posted variables Meder Kydyraliev (Fri Jul 21 2006 - 05:07:37 CDT)
  • RE: Protecting posted variables Debasis Mohanty (Fri Jul 21 2006 - 13:05:59 CDT)
  • Re: Protecting posted variables Brian Rectanus (Fri Jul 21 2006 - 21:27:22 CDT)
• Code Review for Critical Application e.g Internet banking John Greiter (Fri Jul 21 2006 - 08:10:38 CDT)
  • RE: Code Review for Critical Application e.g Internet banking Andrew Chong (Fri Jul 21 2006 - 09:44:50 CDT)
  • Re: Code Review for Critical Application e.g Internet banking mikesharecube.com (Sat Jul 22 2006 - 12:37:18 CDT)
• Identity 2.0 Evans, Arian (Fri Jul 21 2006 - 12:26:53 CDT)
• Fwd: SF new article announcement: After an Exploit: mitigation and remediation Andrew van der Stock (Mon Jul 24 2006 - 11:07:40 CDT)
• Write-up by Amit Klein: "Forging HTTP request headers with Flash" Amit Klein (AKsecurity) (Mon Jul 24 2006 - 14:35:06 CDT)
  • RE: Write-up by Amit Klein: "Forging HTTP request headers with Flash" Amit Klein (AKsecurity) (Thu Jul 27 2006 - 14:28:07 CDT)
  • RE: Write-up by Amit Klein: "Forging HTTP request headers with Flash" Amit Klein (AKsecurity) (Thu Jul 27 2006 - 13:40:13 CDT)
  • RE: Write-up by Amit Klein: "Forging HTTP request headers with Flash" James Pujals (Thu Jul 27 2006 - 13:07:44 CDT)
  • RE: Write-up by Amit Klein: "Forging HTTP request headers with Flash" James Pujals (Thu Jul 27 2006 - 10:28:35 CDT)
• Administrivia: Delays in dealing with posts next three weeks Andrew van der Stock (Tue Jul 25 2006 - 23:11:31 CDT)
• ERRATA (Re: Write-up by Amit Klein: "Forging HTTP request headers with Flash") Amit Klein (AKsecurity) (Wed Jul 26 2006 - 14:42:16 CDT)
• ANNOUNCING: 3rd annual US OWASP AppSec Conference - Oct 16-18 2006 - Seattle, WA Dave Wichers (Wed Jul 26 2006 - 13:57:00 CDT)
• Correct Session Authentication xbennxhotmail.co.uk (Sat Jul 29 2006 - 08:14:42 CDT)
  • Re: Correct Session Authentication Siim Põder (Sat Jul 29 2006 - 11:59:57 CDT)
  • Re: Correct Session Authentication Balazs Attila-Mihaly (Cd-MaN) (Sat Jul 29 2006 - 11:12:01 CDT)
  • Re: Correct Session Authentication Santiago Rocandio (Sat Jul 29 2006 - 13:22:34 CDT)
  • Re: Correct Session Authentication Dean H. Saxe (Sun Jul 30 2006 - 09:10:50 CDT)
• OS XSS and SQL scanner Cherian Thomas (Mon Jul 31 2006 - 05:32:38 CDT)
  • Re: OS XSS and SQL scanner Dean H. Saxe (Mon Jul 31 2006 - 10:50:15 CDT)
  • RE: OS XSS and SQL scanner Mandeep Khera (Mon Jul 31 2006 - 14:52:33 CDT)
  • RE: OS XSS and SQL scanner Arian J. Evans (Tue Aug 01 2006 - 13:35:17 CDT)
  • Re: OS XSS and SQL scanner Dean H. Saxe (Wed Aug 02 2006 - 02:14:37 CDT)
  • Re: OS XSS and SQL scanner Rory McCune (Wed Aug 02 2006 - 04:00:02 CDT)
  • Re: OS XSS and SQL scanner Eoin (Wed Aug 02 2006 - 06:53:58 CDT)
  • RE: OS XSS and SQL scanner Burke, Charles (Wed Aug 02 2006 - 10:23:27 CDT)
  • Re: OS XSS and SQL scanner Dean H. Saxe (Wed Aug 02 2006 - 09:14:16 CDT)
  • Re: OS XSS and SQL scanner Dean H. Saxe (Wed Aug 02 2006 - 10:13:39 CDT)
  • Re: OS XSS and SQL scanner Devdas Bhagat (Wed Aug 02 2006 - 06:23:32 CDT)
  • RE: OS XSS and SQL scanner Dean H. Saxe (Wed Aug 02 2006 - 13:21:08 CDT)
  • Re: OS XSS and SQL scanner Rogan Dawes (Wed Aug 02 2006 - 11:33:21 CDT)
• Spike PHP Security Audit Tool solutions_PHP (Mon Jul 31 2006 - 10:10:25 CDT)
• Reminder: WASC Meet-up at Black Hat (USA 2006) contactwebappsec.org (Mon Jul 31 2006 - 13:17:56 CDT)
• IEEE Web Security Special Mark Curphey (Mon Jul 31 2006 - 15:32:56 CDT)
  • Re: IEEE Web Security Special Eoin (Tue Aug 01 2006 - 07:51:21 CDT)
• RE: [WEB SECURITY] Reminder: WASC Meet-up at Black Hat (USA 2006) contactwebappsec.org (Mon Jul 31 2006 - 13:37:58 CDT)
• AppSec tools it_strategyhotmail.com (Tue Aug 01 2006 - 15:37:14 CDT)
  • Re: AppSec tools Dhruv Soi (Wed Aug 02 2006 - 10:43:15 CDT)
• Fwd: SF new column announcement: E-mail privacy in the workplace Andrew van der Stock (Tue Aug 01 2006 - 00:29:45 CDT)
• JavaScript port scanner pdp (architect) (Wed Aug 02 2006 - 04:01:09 CDT)
• Re: JavaScript port scanning pdp (architect) (Wed Aug 02 2006 - 07:41:07 CDT)
  • Re: JavaScript port scanning pdp (architect) (Wed Aug 02 2006 - 07:46:31 CDT)
• Attacking the local LAN via XSS pdp (architect) (Thu Aug 03 2006 - 18:35:48 CDT)
• Re: [Full-disclosure] Attacking the local LAN via XSS Schanulleke (Fri Aug 04 2006 - 02:21:56 CDT)
  • Re: [Full-disclosure] Attacking the local LAN via XSS pdp (architect) (Fri Aug 04 2006 - 05:29:05 CDT)
  • Re: [Full-disclosure] Attacking the local LAN via XSS Nikolay Kubarelov (Mon Aug 07 2006 - 18:23:38 CDT)
  • Re: [Full-disclosure] Attacking the local LAN via XSS Dude VanWinkle (Tue Aug 08 2006 - 08:22:10 CDT)
• Re[2]: [Full-disclosure] Attacking the local LAN via XSS Thierry Zoller (Fri Aug 04 2006 - 07:11:40 CDT)
  • Re: Re[2]: [Full-disclosure] Attacking the local LAN via XSS pdp (architect) (Fri Aug 04 2006 - 08:06:57 CDT)
• ARES 2007: Call for workshop proposals, deadline Sept 10, 2006 Manh Tho (Sun Aug 06 2006 - 15:04:55 CDT)
• Environment for testing WebApp Security Scanners René Palige (Mon Aug 07 2006 - 15:33:02 CDT)
  • RE: Environment for testing WebApp Security Scanners Mark Curphey (Tue Aug 08 2006 - 06:07:35 CDT)
  • Re: Environment for testing WebApp Security Scanners Roman H. (Tue Aug 08 2006 - 05:54:13 CDT)
  • RE: Environment for testing WebApp Security Scanners Brokken, Allen P. (Tue Aug 08 2006 - 09:25:51 CDT)
  • Re: Environment for testing WebApp Security Scanners Dean H. Saxe (Tue Aug 08 2006 - 14:52:26 CDT)
  • Re: Environment for testing WebApp Security Scanners mikeiscool (Tue Aug 08 2006 - 19:09:43 CDT)
  • Re: Environment for testing WebApp Security Scanners Gerald Quakenbush (Tue Aug 08 2006 - 20:40:24 CDT)
  • Re: Environment for testing WebApp Security Scanners Dean H. Saxe (Tue Aug 08 2006 - 19:01:36 CDT)
  • Re: Environment for testing WebApp Security Scanners mikeiscool (Tue Aug 08 2006 - 18:25:02 CDT)
  • RE: Environment for testing WebApp Security Scanners Mark Curphey (Tue Aug 08 2006 - 21:34:30 CDT)
  • Re: Environment for testing WebApp Security Scanners c0redumpackers.org.uk (Wed Aug 09 2006 - 05:44:33 CDT)
  • Re: Environment for testing WebApp Security Scanners mikeiscool (Wed Aug 09 2006 - 17:19:57 CDT)
  • RE: Environment for testing WebApp Security Scanners Evans, Arian (Wed Aug 23 2006 - 16:54:52 CDT)
• Announcement: Feed Injection in Web 2.0: Hacking RSS and Atom Feed Implementations [Whitepaper] SPI Labs (Mon Aug 07 2006 - 15:28:54 CDT)
• SF new column announcement: E-mail privacy in the workplace Craig Wright (Mon Aug 07 2006 - 17:43:53 CDT)
  • RE: SF new column announcement: E-mail privacy in the workplace Craig Wright (Tue Aug 01 2006 - 19:24:54 CDT)
• XSSing the Lan 3 (web trojans.. not a new idea) pdp (architect) (Tue Aug 08 2006 - 08:18:45 CDT)
• Paros 3.2.13 release contactparosproxy.org (Tue Aug 08 2006 - 09:56:10 CDT)
• Parameter fuzzing and forced browsing indianwhitehathackeryahoo.com (Wed Aug 09 2006 - 09:26:59 CDT)
  • Re: Parameter fuzzing and forced browsing mikeiscool (Wed Aug 09 2006 - 18:55:22 CDT)
  • Re: Parameter fuzzing and forced browsing Ryan Barnett (Thu Aug 10 2006 - 07:02:47 CDT)
• Ruby On Rails 1.1.5 Released to Address Critical Vulnerability bugtraqcgisecurity.net (Wed Aug 09 2006 - 20:33:17 CDT)
  • RE: Ruby On Rails 1.1.5 Released to Address Critical Vulnerability James Pujals (Thu Aug 10 2006 - 11:04:22 CDT)
• Sending multipart/form-data requests from Flash (with arbitrary headers) Amit Klein (AKsecurity) (Thu Aug 10 2006 - 02:25:32 CDT)
• Unable to disable browser caching in Firefox through HTTP headers smith.nortongmail.com (Thu Aug 10 2006 - 02:15:15 CDT)
• Comparison report on web app security scanners now translated to English Holger.Peineiese.fraunhofer.de (Thu Aug 10 2006 - 04:54:55 CDT)
  • Re: Comparison report on web app security scanners now translated to English Rogan Dawes (Mon Aug 14 2006 - 07:22:51 CDT)
  • Re: Comparison report on web app security scanners now translated to English Saqib Ali (Tue Sep 19 2006 - 11:59:34 CDT)
  • Re: Comparison report on web app security scanners now translated to English Roberto Tanara (Tue Sep 19 2006 - 09:11:31 CDT)
• RE: [WEB SECURITY] Ruby On Rails 1.1.5 Released to Address Critical Vulnerability Caleb Sima (Thu Aug 10 2006 - 09:27:49 CDT)
• Re: [WEB SECURITY] RE: Ruby On Rails 1.1.5 Released to Address Critical Vulnerability Brian Eaton (Thu Aug 10 2006 - 12:34:05 CDT)
• LAPSE: code auditing tool for Java Benjamin Livshits (Fri Aug 11 2006 - 13:41:46 CDT)
• Re: [Full-disclosure] JavaScript get Internal Address (thanks to DanBUK) pdp (architect) (Sat Aug 12 2006 - 08:16:16 CDT)
  • Re: [Full-disclosure] JavaScript get Internal Address (thanks to DanBUK) Martin Dipo Zimmermann (Sat Aug 12 2006 - 06:48:20 CDT)
• JavaScript get Internal Address (thanks to DanBUK) pdp (architect) (Sat Aug 12 2006 - 03:55:02 CDT)
• RE: ANNOUNCING: 3rd Annual US OWASP AppSec Conference - Oct 16-18 2006 - Seattle, WA Dave Wichers (Sun Aug 13 2006 - 17:39:35 CDT)
• Re: Tomcat Security davedevaulthotmail.com (Mon Aug 14 2006 - 14:20:11 CDT)
• Re: [SC-L] Registration Now Open!: 3rd Annual US OWASP AppSec Conference - Oct 16-18 2006 - Seattle, WA Pascal Meunier (Wed Aug 16 2006 - 15:27:46 CDT)
• Re: JavaScript Lazy Authorization Forcer and Visited Link Scaner mikeiscool (Tue Aug 15 2006 - 23:08:15 CDT)
• RE: [WEB SECURITY] "hack-me" Ajax apps? Jeff Robertson (Wed Aug 16 2006 - 13:28:11 CDT)
• Technical note by Amit Klein: "Sending arbitrary HTTP requests with Flash 7/8 (+IE 6.0)" Amit Klein (AKsecurity) (Wed Aug 16 2006 - 15:33:52 CDT)
• JavaScript Lazy Authorization Forcer and Visited Link Scaner pdp (architect) (Tue Aug 15 2006 - 16:55:52 CDT)
• Invitation, Slovenia and Italy; Journal Special Issues; c/bb IPSI conference (Mon Aug 14 2006 - 15:38:34 CDT)
  • Re: Invitation, Slovenia and Italy; Journal Special Issues; c/bb Stephen de Vries (Thu Aug 17 2006 - 07:32:57 CDT)
• Registration Now Open!: 3rd Annual US OWASP AppSec Conference - Oct 16-18 2006 - Seattle, WA Dave Wichers (Wed Aug 16 2006 - 14:19:39 CDT)
• Technical note: under some conditions, it's possible to steal HTTP credentials using Flash Amit Klein (AKsecurity) (Mon Aug 14 2006 - 13:52:45 CDT)
• Mitm new? Jeff Robertson (Mon Aug 14 2006 - 12:52:46 CDT)
  • Re: Mitm new? ROB DIXON (Thu Aug 17 2006 - 10:10:34 CDT)
  • Re: Mitm new? Rogan Dawes (Thu Aug 17 2006 - 03:32:34 CDT)
  • Re: Mitm new? mikeiscool (Wed Aug 16 2006 - 19:42:08 CDT)
  • Re: Mitm new? Nick Owen (Fri Aug 18 2006 - 10:47:51 CDT)
• (somewhat) breaking the same-origin policy by undermining dns-pinning Martin Johns (Mon Aug 14 2006 - 11:07:31 CDT)
• Re: [WEB SECURITY] "hack-me" Ajax apps? kurtshopdecorum.com (Wed Aug 16 2006 - 13:26:00 CDT)
• "hack-me" Ajax apps? Jeff Robertson (Wed Aug 16 2006 - 07:07:36 CDT)
  • Re: "hack-me" Ajax apps? Andrew van der Stock (Mon Aug 21 2006 - 06:48:00 CDT)
• Corsaire White Paper: Assessing Java Clients with the BeanShell Stephen de Vries (Fri Aug 18 2006 - 03:04:35 CDT)
  • Re: Corsaire White Paper: Assessing Java Clients with the BeanShell Stephen de Vries (Sat Aug 19 2006 - 22:03:56 CDT)
  • Re: Corsaire White Paper: Assessing Java Clients with the BeanShell Matthew Franz (Sat Aug 19 2006 - 18:05:14 CDT)
• Re: Dates Correction - World Summit on Intrusion Prevention, May 8-9, 2007 wsipunatek.com (Fri Aug 18 2006 - 09:09:56 CDT)
• World Summit on Intrusion Prevention wsipunatek.com (Thu Aug 17 2006 - 09:16:29 CDT)
• Registration Now Open!: Security OPUS Infosec Conference - Oct 2-5 2006 - San Francisco, CA Richard Lindberg (Thu Aug 17 2006 - 07:50:05 CDT)
• (BLED) IPSI Albert (Thu Aug 17 2006 - 04:39:30 CDT)
• testing compiled php Robin Wood (Fri Aug 18 2006 - 14:18:17 CDT)
  • Re: testing compiled php Attila-Mihaly Balazs (Sat Aug 19 2006 - 11:14:00 CDT)
  • Re: testing compiled php crazy frog crazy frog (Sat Aug 19 2006 - 09:45:09 CDT)
  • Re: testing compiled php Robin Wood (Mon Aug 21 2006 - 03:46:46 CDT)
  • Re: testing compiled php Robin Wood (Mon Aug 21 2006 - 03:39:02 CDT)
• Administrivia: Move the list? Andrew van der Stock (Mon Aug 21 2006 - 07:11:49 CDT)
  • Re: Administrivia: Move the list? Andrew van der Stock (Mon Aug 21 2006 - 07:48:14 CDT)
• Administrivia: Time to choose, please vote Andrew van der Stock (Tue Aug 22 2006 - 17:46:37 CDT)
• Mozilla Firefox can't disable browser cache. Why? smith.nortongmail.com (Wed Aug 23 2006 - 08:06:40 CDT)
  • Re: Mozilla Firefox can't disable browser cache. Why? mark (Wed Aug 23 2006 - 13:41:24 CDT)
  • RE: Mozilla Firefox can't disable browser cache. Why? Tony Stahler (Wed Aug 23 2006 - 09:44:15 CDT)
  • Re: Mozilla Firefox can't disable browser cache. Why? Ron (Wed Aug 23 2006 - 09:32:16 CDT)
  • Re: Mozilla Firefox can't disable browser cache. Why? Damien Watson (Thu Aug 24 2006 - 07:47:40 CDT)
  • Re: Re: Mozilla Firefox can't disable browser cache. Why? smith.nortongmail.com (Sun Aug 27 2006 - 00:02:32 CDT)
• WiKID 2.1.1 released Nick Owen (Wed Aug 23 2006 - 12:44:15 CDT)
• Re: [WEB SECURITY] RE: Environment for testing WebApp Security Scanners Enis Karaarslan (Thu Aug 24 2006 - 02:08:29 CDT)
• RE: [WEB SECURITY] RE: Environment for testing WebApp Security Scanners Enis Karaarslan (Thu Aug 24 2006 - 07:38:06 CDT)
• RE: [WEB SECURITY] RE: Environment for testing WebApp Security Scanners Joseph Peloquin (Thu Aug 24 2006 - 07:52:42 CDT)
  • RE: [WEB SECURITY] RE: Environment for testing WebApp Security Scanners Joseph Peloquin (Thu Aug 24 2006 - 09:46:48 CDT)
• Re: [WEB SECURITY] RE: Environment for testing WebApp Security Scanners René Palige (Thu Aug 24 2006 - 08:44:54 CDT)
  • Re: [WEB SECURITY] RE: Environment for testing WebApp Security Scanners René Palige (Thu Aug 24 2006 - 09:46:48 CDT)
  • Re: [WEB SECURITY] RE: Environment for testing WebApp Security Scanners Albert (Fri Aug 25 2006 - 05:27:48 CDT)
• RE: [WEB SECURITY] RE: Environment for testing WebApp Security Scanners Enis Karaarslan (Thu Aug 24 2006 - 09:46:48 CDT)
• Problem about detecting "SMTP command injection", i.e. cr lf chars in web forms Maxime Ducharme (Thu Aug 24 2006 - 10:17:11 CDT)
• Hacme Casino v1.0 alex.smolenfoundstone.com (Thu Aug 24 2006 - 19:15:07 CDT)
• Cookie poisoning without XSS Smith Norton (Fri Aug 25 2006 - 09:17:28 CDT)
  • Re: Cookie poisoning without XSS Martin Straka (Fri Aug 25 2006 - 13:45:42 CDT)
  • Re: Cookie poisoning without XSS Dr HenDre (Fri Aug 25 2006 - 12:17:40 CDT)
  • RE: Cookie poisoning without XSS Richard M. Smith (Fri Aug 25 2006 - 12:01:01 CDT)
  • RE: Cookie poisoning without XSS Ory Segal (Fri Aug 25 2006 - 12:08:06 CDT)
  • RE: Cookie poisoning without XSS Richard M. Smith (Fri Aug 25 2006 - 15:07:43 CDT)
  • Re: Cookie poisoning without XSS Kanatoko (Wed Aug 30 2006 - 00:57:13 CDT)
  • Re: Cookie poisoning without XSS Matteo Meucci (Mon Sep 04 2006 - 07:58:27 CDT)
• CIS Apache Benchmark security standard Ralf Durkee (Fri Aug 25 2006 - 11:26:43 CDT)
• [Full-disclosure] AttackAPI 0.5 (JavaScript tools) pdp (architect) (Sat Aug 26 2006 - 17:01:33 CDT)
• Enumerate Web Virtual Site Roger Liu (Mon Aug 28 2006 - 19:48:13 CDT)
  • Re: Enumerate Web Virtual Site solutions_PHP (Tue Aug 29 2006 - 11:56:50 CDT)
  • Re: Enumerate Web Virtual Site Andres Riancho (Tue Aug 29 2006 - 12:16:45 CDT)
  • Re: Enumerate Web Virtual Site Sheryl (Tue Aug 29 2006 - 16:51:41 CDT)
  • Re: Enumerate Web Virtual Site Jack Tennessee (Tue Aug 29 2006 - 13:06:16 CDT)
  • Re: Enumerate Web Virtual Site scott (Tue Aug 29 2006 - 21:34:47 CDT)
  • Re: Enumerate Web Virtual Site Hemil (Wed Aug 30 2006 - 00:21:14 CDT)
  • Re: Enumerate Web Virtual Site thomas springer (Sat Sep 02 2006 - 11:24:04 CDT)
• need help with webgoat Tomaz Korosec (Wed Aug 30 2006 - 08:05:54 CDT)
  • Re: need help with webgoat chrislearnsecurityonline.com (Mon Sep 04 2006 - 13:07:08 CDT)
• Xoop Vlad (Wed Aug 30 2006 - 11:21:24 CDT)
  • Re: Xoop Vlad (Thu Aug 31 2006 - 12:19:13 CDT)
  • Re: Xoop Josh Zlatin-Amishav (Thu Aug 31 2006 - 02:47:12 CDT)
• rewrite rule for apache bituman (Thu Aug 31 2006 - 08:22:31 CDT)
• OWASP Autumn Of Code 2006 Dinis Cruz (Thu Aug 31 2006 - 18:00:41 CDT)
• Dinis Cruz Video Interview on ASP.NET Full Trust Mark Curphey (Thu Aug 31 2006 - 18:57:30 CDT)
• Microsoft Research Builds BrowserShield bugtraqcgisecurity.net (Tue Sep 05 2006 - 11:51:26 CDT)
  • Re: Microsoft Research Builds BrowserShield Michal Zalewski (Wed Sep 06 2006 - 11:42:54 CDT)
  • Re: Microsoft Research Builds BrowserShield Sap . (Fri Sep 08 2006 - 14:34:46 CDT)
• HITBSecConf2006 Final Call ! Praburaajan (Tue Sep 05 2006 - 00:27:46 CDT)
• 2nd European Conference on Computer Network Defense (EC2ND) Blyth A J C (AT) (Tue Sep 05 2006 - 09:20:25 CDT)
• Reminder: 3rd Annual US OWASP AppSec Conference - Oct 16-18 2006 - Seattle, WA Dave Wichers (Tue Sep 05 2006 - 20:58:57 CDT)
• Host header cannot be trusted as an anti anti DNS-pinning measure Amit Klein (AKsecurity) (Thu Sep 07 2006 - 13:23:24 CDT)
• Black Hat Briefings Japan Speakers Selected! Jeff Moss (Thu Sep 07 2006 - 19:10:11 CDT)
• Web Application Analysis Tool - SWAAT Nish Bhalla (Thu Sep 07 2006 - 05:29:02 CDT)
• Re: [WEB SECURITY] New PCI requires code review or WAF Nick Owen (Fri Sep 08 2006 - 10:24:50 CDT)
  • Re: [WEB SECURITY] New PCI requires code review or WAF Dave Ockwell-Jenner (Fri Sep 08 2006 - 10:00:26 CDT)
• Re: Cross Context Scripting with Sage bugtraqcgisecurity.net (Mon Sep 11 2006 - 08:35:48 CDT)
• best practices Matteo Nava (Thu Sep 14 2006 - 21:31:21 CDT)
  • Re: best practices Rick Zhong (Fri Sep 15 2006 - 03:31:10 CDT)
  • Re: best practices Siim Põder (Mon Sep 18 2006 - 10:34:00 CDT)
  • Re: best practices Dave Ferguson (Fri Sep 15 2006 - 10:21:21 CDT)
• Hardcoded Database IP in ASP Darryl Stevens (Thu Sep 14 2006 - 13:28:13 CDT)
  • RE: Hardcoded Database IP in ASP Ken Schaefer (Mon Sep 18 2006 - 01:54:05 CDT)
  • Re: Hardcoded Database IP in ASP Darryl Stevens (Fri Sep 15 2006 - 12:45:10 CDT)
  • RE: Hardcoded Database IP in ASP Darryl Stevens (Fri Sep 15 2006 - 12:39:50 CDT)
  • Re: Hardcoded Database IP in ASP RSnake (Fri Sep 15 2006 - 10:24:34 CDT)
  • Re: Hardcoded Database IP in ASP security (Fri Sep 15 2006 - 08:44:48 CDT)
  • Re: Hardcoded Database IP in ASP PCSC Information Services (Tue Sep 19 2006 - 18:55:38 CDT)
• Comparison report on web app security scanners now translated to English Cleiton Martins (Mon Sep 18 2006 - 17:17:26 CDT)
  • RE: Comparison report on web app security scanners now translated to English Holger.Peineiese.fraunhofer.de (Thu Aug 17 2006 - 01:49:52 CDT)
  • RE: Comparison report on web app security scanners now translated to English Evans, Arian (Fri Sep 22 2006 - 11:36:02 CDT)
• Anybody got a licenced copy of Acunetix, Centric or other Web App Scans? Dinis Cruz (Tue Sep 19 2006 - 09:19:12 CDT)
  • Re: Anybody got a licenced copy of Acunetix, Centric or other Web App Scans? Kish Pent (Sun Sep 24 2006 - 11:47:00 CDT)
  • Re: Anybody got a licenced copy of Acunetix, Centric or other Web App Scans? c0redumpackers.org.uk (Mon Sep 25 2006 - 06:57:06 CDT)
  • Re: Anybody got a licenced copy of Acunetix, Centric or other Web App Scans? Cleiton Martins (Mon Sep 25 2006 - 16:13:31 CDT)
• Re: [Full-disclosure] Self-contained XSS Attacks (the new generation of XSS) Tim (Fri Sep 22 2006 - 09:03:11 CDT)
• Comparison report on web app security scanners (English) is now available again docbook.xmlgmail.com (Fri Sep 22 2006 - 09:50:10 CDT)
• Comparison report on web app security scanners (English) is now available again Saqib Ali (Fri Sep 22 2006 - 11:57:35 CDT)
• FIS [File Inclusion Scanner] v0.1 Tasos (Sun Sep 24 2006 - 12:00:42 CDT)
• Ruxcon 2006 cfpruxcon.org.au (Mon Sep 25 2006 - 22:41:37 CDT)
• web application, data classification and database security test.futuregmail.com (Tue Sep 26 2006 - 03:11:08 CDT)
  • Re: web application, data classification and database security test.futuregmail.com (Wed Sep 27 2006 - 01:19:34 CDT)
• XML Port Scanning Paul Theriault (Tue Sep 26 2006 - 23:18:40 CDT)
• Interview With Modsecurity Author Ivan Ristic bugtraqcgisecurity.net (Wed Sep 27 2006 - 09:07:20 CDT)
• XML File Inclusion and Path Traversal Attacks (was RE: XML Port Scanning) Jan P. Monsch (Wed Sep 27 2006 - 14:28:25 CDT)
• Open Source Application Vulnerability Assessment Tools Brokken, Allen P. (Wed Sep 27 2006 - 14:40:19 CDT)
  • Re: Open Source Application Vulnerability Assessment Tools Stephen de Vries (Thu Sep 28 2006 - 03:05:09 CDT)
  • Re: Open Source Application Vulnerability Assessment Tools Aman Raheja (Thu Sep 28 2006 - 16:01:16 CDT)
• Google Security Team Contacts? Dave Wichers (Thu Sep 28 2006 - 13:32:47 CDT)

Last message date: Thu Sep 28 2006 - 17:25:29 CDT
Archived on: Thu Sep 28 2006 - 17:25:29 CDT

315 messages sorted by: [ author ] [ date ] [ subject ]