WebApp Sec: by thread

• RSS Feed
• About List
• All Lists

Previous period

Next period

88 messages starting Jan 06 08 and ending Mar 28 08
Date index | Thread index | Author index

• Welcome to a new year at WebAppSec Andrew van der Stock (Jan 06)
• SQL Injection: Issue with UNION SELECT ALL Joseph McCray (Jan 09)
  • RE: SQL Injection: Issue with UNION SELECT ALL Calderon, Juan Carlos (GE, Corporate, consultant) (Jan 09)
• OWASP Asia Pacific & Australia Application Security Conference FEB 2008 Justin Derry (Jan 09)
• Encrypted cookies Ron (Jan 10)
  • Re: Encrypted cookies Andrew van der Stock (Jan 10)
    • Re: Encrypted cookies Andy Steingruebl (Jan 11)
  • Re: Encrypted cookies Andy Steingruebl (Jan 10)
  • Re: Encrypted cookies Lucas Oman (Jan 10)
  • RE: Encrypted cookies Brokken, Allen P. (Jan 10)
    • Re: Encrypted cookies Orlin Gueorguiev (Jan 11)
  • <Possible follow-ups>
  • Re: Encrypted cookies Rico Secada (Jan 10)
  • Fw: Re: Encrypted cookies Rico Secada (Jan 11)
    • Re: Fw: Re: Encrypted cookies Ron (Jan 15)
• Re: [WEB SECURITY] Deploying WAFs In Listening-Only Mode - Waste of Money? Ryan Barnett (Jan 13)
  • <Possible follow-ups>
  • Re: [WEB SECURITY] Deploying WAFs In Listening-Only Mode - Waste of Money? Ivan Ristic (Jan 13)
    • Re: [WEB SECURITY] Deploying WAFs In Listening-Only Mode - Waste of Money? Henry Troup (Jan 14)
      • RE: [WEB SECURITY] Deploying WAFs In Listening-Only Mode - Waste of Money? Ofer Shezaf (Jan 16)
  • RE: [WEB SECURITY] Deploying WAFs In Listening-Only Mode - Waste of Money? Ofer Shezaf (Jan 13)
  • Re: [WEB SECURITY] Deploying WAFs In Listening-Only Mode - Waste of Money? Ryan Barnett (Jan 13)
  • Re: [WEB SECURITY] Deploying WAFs In Listening-Only Mode - Waste of Money? Ryan Barnett (Jan 14)
  • RE: [WEB SECURITY] Deploying WAFs In Listening-Only Mode - Waste of Money? sankalpa h (Jan 20)
• New search engine for exploits Security Basic (Jan 20)
• sqlninja 0.2.2 released A. R. (Jan 22)
• wfuzz v1.4 - The web bruteforcer Christian Martorella (Jan 25)
• Apache mod_negotiation Xss and Http Response Splitting Minded Security Research Labs (Jan 25)
• Web Application Security mahendra_yn (Jan 25)
  • Re: Web Application Security Javier Fernandez-Sanguino (Mar 10)
    • Re: Web Application Security Zack Peters (Mar 11)
      • RE: Web Application Security Jayaraman, Anand X. (Mar 11)
      • RE: Web Application Security Ofer Shezaf (Mar 12)
• extra dot on domain name gives different site Robin Wood (Jan 25)
  • Re: extra dot on domain name gives different site Eric Marden (Jan 26)
  • Re: extra dot on domain name gives different site Robert Hajime Lanning (Jan 26)
    • Re: extra dot on domain name gives different site Robin Wood (Jan 26)
      • Re: extra dot on domain name gives different site Javier Fernandez-Sanguino (Mar 10)
• Tool to test SAML artifacts and assertions Philip Cox (Jan 31)
  • <Possible follow-ups>
  • Re: Tool to test SAML artifacts and assertions ' =JeffH ' (Feb 08)
• Insomnia: Tool Release - InsomniaShell.aspx Brett Moore (Feb 11)
• Thanks to all, ExploitSearch in Top5 security must-have Security Basic (Feb 12)
• IIS 6 SQL Injection Prevention ISAPI (GNU License) Rodney Viana (Plenux) (Feb 13)
• Certification for Web Application Security Professionals Anurag Agarwal (Feb 21)
• AJAX Concept Question Mat (Feb 21)
  • Re: AJAX Concept Question Charles Miller (Feb 22)
  • Re: AJAX Concept Question Peter Conrad (Feb 22)
  • RE: AJAX Concept Question Jason Karlin (Feb 22)
• CanSecWest 2008 Mar 26-28 Dragos Ruiu (Feb 22)
• Web Services Security Training Course (NYC - March 10 & 11, 2008) Peter Soderling (Feb 25)
• post vulnerability scenario davemitch (Mar 06)
• AW: post vulnerability scenario Martin Muench (Mar 12)
• Plone CMS Security Research: the Art of Plowning Adrian Pastor (Mar 13)
• Black Hat Announcements: New CFP system and Japan '08 confirmed jmoss (Mar 15)
• Troopers08 Security Conference, 23/24 April (Munich/Germany) Enno Rey (Mar 17)
• PHP Security Greg Song (Mar 18)
  • Re: PHP Security Eduardo Tongson (Mar 18)
  • Re: PHP Security Eric Marden (Mar 18)
    • Re: PHP Security Greg Song (Mar 18)
  • <Possible follow-ups>
  • Re: PHP Security Greg Song (Mar 18)
• web application scanning tool - any unsecure demo sites out there to run them against? bigbert007 (Mar 18)
  • RE: web application scanning tool - any unsecure demo sites out there to run them against? Darren Webb (Mar 18)
    • Re: web application scanning tool - any unsecure demo sites out there to run them against? bigbert007 (Mar 18)
  • RE: web application scanning tool - any unsecure demo sites out there to run them against? Chris Grove (Mar 18)
  • <Possible follow-ups>
  • Fwd: Re: web application scanning tool - any unsecure demo sites out there to run them against? RUI PEREIRA - WCG (Mar 18)
    • RE: Re: web application scanning tool - any unsecure demo sites out there to run them against? Thakrar, Saurabh (Mar 18)
• CSRF attack in Firefox Vishal Garg (Mar 18)
  • Re: CSRF attack in Firefox Jamie Riden (Mar 18)
  • Re: CSRF attack in Firefox Ali, Saqib (Mar 18)
• AW: web application scanning tool - any unsecure demo sites out t here to run them against? Martin Muench (Mar 19)
• Release of webshag 1.00! webshag (Mar 20)
• [MSA01240108] IE7 Transfer-Encoding: chunked allows Request Splitting/Smuggling. Minded Security Research Labs (Mar 21)
• [MSA02240108] IE7 allows overwriting of several headers leading to Http request Splitting and smuggling. Minded Security Research Labs (Mar 21)
• CanSecWest 2008 PWN2OWN - Mar 26-28 Dragos Ruiu (Mar 21)
• OpenID and the web Steven Rakick (Mar 25)
  • Re: OpenID and the web David Wall (Mar 25)
    • Message not available
      • Re: OpenID and the web David Wall (Mar 25)
  • Re: OpenID and the web Adrian Migraso (Mar 25)
  • Re: OpenID and the web Eric Marden (Mar 26)
    • Re: OpenID and the web Babu.N (Mar 26)
      • Re: OpenID and the web Razi Shaban (Mar 27)
      • Re: OpenID and the web Jeff Robertson (Mar 27)
      • RE: OpenID and the web Calderon, Juan Carlos (GE, Corporate, consultant) (Mar 27)
      • Re: OpenID and the web Lucas Oman (Mar 27)
      • Re: OpenID and the web Razi Shaban (Mar 27)
      • Re: OpenID and the web David Wall (Mar 27)
      • Re: OpenID and the web Jeremiah Cornelius (Mar 27)
      • RE: OpenID and the web Chris Grove (Mar 28)
  • <Possible follow-ups>
  • Re: OpenID and the web Pete Jansson (Mar 27)
    • Re: OpenID and the web baldr (Mar 27)

Previous period

Next period