Penetration Testing mailing list archives

Re: [PEN-TEST] HTTP Secure Session State Management

From: Drew Simonis <dsimonis () FIDERUS COM>
Date: Thu, 28 Dec 2000 10:21:08 -0500

"Edwards, David (JTD)" wrote:



To attempt to bring this back "on-topic" a bit :-)

Has anyone looked at network penetration using WEBDAV/NDSDAV?
Or even seen a security evaluation of WEBDAV/NDSDAV?


Also more on topic... Don't PHP4 and MS ASP have some built in
session management features?  Has anyone hacked these methods
enough to understand what they do?

Current thread:

Re: [PEN-TEST] HTTP Secure Session State Management, (continued)
- - Re: [PEN-TEST] HTTP Secure Session State Management Mark Curphey (Dec 26)
    - Re: [PEN-TEST] HTTP Secure Session State Management Drew Simonis (Dec 27)
- Re: [PEN-TEST] HTTP Secure Session State Management Bill Reamy (Dec 26)
  - Re: [PEN-TEST] HTTP Secure Session State Management Mark Curphey (Dec 27)
  - Re: [PEN-TEST] HTTP Secure Session State Management Robert van der Meulen (Dec 27)
- Re: [PEN-TEST] HTTP Secure Session State Management Yonatan Bokovza (Dec 27)
  - Re: [PEN-TEST] HTTP Secure Session State Management Dom De Vitto (Dec 27)
    - Re: [PEN-TEST] HTTP Secure Session State Management Ian Charnas (Dec 27)
- Re: [PEN-TEST] HTTP Secure Session State Management St. Clair, James (Dec 27)
- Re: [PEN-TEST] HTTP Secure Session State Management Edwards, David (JTD) (Dec 27)
  - Re: [PEN-TEST] HTTP Secure Session State Management Drew Simonis (Dec 28)
    - Re: [PEN-TEST] HTTP Secure Session State Management van der Kooij, Hugo (Dec 28)
    - Re: [PEN-TEST] HTTP Secure Session State Management Thomas Reinke (Dec 28)
    - Re: [PEN-TEST] HTTP Secure Session State Management Matt W. (Dec 28)
    - Re: [PEN-TEST] HTTP Secure Session State Management Drew Simonis (Dec 28)