Hosting Provided By

Mailing List Archive For webappsec@securityfocus.com By Subject

Apache module: mod_security
- Gabe Lawrence (10 Dec 2002)
- zeno (10 Dec 2002)
- Ivan Ristic (10 Dec 2002)
- Klaus Doerrscheidt (10 Dec 2002)
- Ivan Ristic (10 Dec 2002)
- Bill Burge (10 Dec 2002)
- Dave Aitel (10 Dec 2002)
- Ivan Ristic (10 Dec 2002)
Can I obtain BASIC AUTH credentials using an XSS vulnerbility
- Jill Tovey (05 Dec 2002)
- frank fish (02 Dec 2002)
Computer world article highlighting the importance of webapps ec
- St. Clair, James (09 Dec 2002)
Computer world article highliting the importance of webappsec
- Keith T. Morgan (05 Dec 2002)
ENC: W3C XML encryption specs approved
- Mads Rasmussen (11 Dec 2002)
encoder
- Kevin Spett (19 Dec 2002)
- N30 (19 Dec 2002)
forbidden functions on client-side scripts
- Thor Larholm (13 Dec 2002)
- Alonso Robles (12 Dec 2002)
- Uzi Refaeli (12 Dec 2002)
- Shimon Silberschlag (11 Dec 2002)
Fwd: Security Paper: Session Fixation Vulnerability in Web-based Applications
- Craig_Sullivan(at)Waitrose.co.uk (20 Dec 2002)
- Sverre H. Huseby (19 Dec 2002)
- Mark Curphey (18 Dec 2002)
Great XML Security Primer
- Javier Fernández-Sanguino Peña (09 Dec 2002)
- Mark Curphey (01 Dec 2002)
Hijacking URL Encoded Session IDs using Referer Logs
- UDP 53 (05 Dec 2002)
IIS session cookies
- Kapila, Sai (08 Dec 2002)
- Forrest Lee Andrews (07 Dec 2002)
- securityarchitect(at)hush.com (07 Dec 2002)
- Takayuki Nakamura (05 Dec 2002)
- Kevin Spett (05 Dec 2002)
- Cade Cairns (06 Dec 2002)
- Kevin Spett (06 Dec 2002)
- Michael Howard (06 Dec 2002)
- Cade Cairns (05 Dec 2002)
Java validaton article
- Andrew Jaquith (12 Dec 2002)
JDBC PreparedStatements, Java Data Objects/O-R mapping, and SQL Injection
- Christopher Todd (31 Dec 2002)
- Michael Howard (31 Dec 2002)
- Jeff Williams (at) Aspect (30 Dec 2002)
- Kevin Spett (30 Dec 2002)
- Dave Aitel (30 Dec 2002)
- Kevin Spett (30 Dec 2002)
- Christopher Todd (30 Dec 2002)
JSP Security - Limiting URL's
- mlh(at)zip.com.au (10 Dec 2002)
- Jeremy Poteet (10 Dec 2002)
- Steve Posick (10 Dec 2002)
- Andrew Jaquith (10 Dec 2002)
- Jeff Williams (at) Aspect (09 Dec 2002)
- securityarchitect(at)hush.com (09 Dec 2002)
Mangle available for download
- Dawes, Rogan (ZA - Johannesburg) (22 Dec 2002)
Merry Christmas and a Happy New Year.
- Mark Curphey (20 Dec 2002)
modify non-persistent cookies
- Choong-Fook Fong (19 Dec 2002)
- Kevin Spett (18 Dec 2002)
- Uzi Refaeli (18 Dec 2002)
- zeno (17 Dec 2002)
- Mr. Rufus Faloofus (17 Dec 2002)
- Charles Miller (17 Dec 2002)
- securityarchitect(at)hush.com (17 Dec 2002)
- Venkat, Sanjay (17 Dec 2002)
- Chris Neppes (17 Dec 2002)
- MICHAEL GERMONY (17 Dec 2002)
- Glyn (17 Dec 2002)
- Peter Conrad (17 Dec 2002)
- mono toy (17 Dec 2002)
OpenHack and OWASP Testing Methodology
- jcosta(at)lendleaserei.com (03 Dec 2002)
- David Endler (03 Dec 2002)
OWASP Guide Version 2 - New Authors Wanted
- Mark Curphey (07 Dec 2002)
post to bugtraq about "session fixation"
- H D Moore (20 Dec 2002)
- Cesar (20 Dec 2002)
- Steven M. Christey (19 Dec 2002)
- Alex Russell (18 Dec 2002)
- Kevin Spett (18 Dec 2002)
- Panayiotis A. Thermos (18 Dec 2002)
- securityarchitect(at)hush.com (18 Dec 2002)
- Alex Russell (18 Dec 2002)
securing web based game
- Tim Aranki (23 Dec 2002)
- Tomas (23 Dec 2002)
- Adam [ckkl] (22 Dec 2002)
- Adrian Wiesmann (22 Dec 2002)
- Adam [ckkl] (22 Dec 2002)
- Tomas (22 Dec 2002)
Security Paper: Session Fixation Vulnerability in Web-based Applications
- Bill Pennington (19 Dec 2002)
Sequence Identification Routines?
- securityarchitect(at)hush.com (10 Dec 2002)
- Dawes, Rogan (ZA - Johannesburg) (10 Dec 2002)
- maddany (09 Dec 2002)
- Tony Welsh (09 Dec 2002)
- Jeff Williams (at) Aspect (09 Dec 2002)
- Charlie Root (09 Dec 2002)
- Nick Jacobsen (09 Dec 2002)
SUMMARY modify non-persistent cookies and more q's
- Chris Wysopal (20 Dec 2002)
- Kevin Spett (19 Dec 2002)
- Dave Aitel (19 Dec 2002)
- Dawes, Rogan (ZA - Johannesburg) (19 Dec 2002)
- mono toy (19 Dec 2002)
Top Ten Web App Sec Problems
- Steven M. Christey (04 Dec 2002)
- Jeff Williams (at) Aspect (04 Dec 2002)
- b0iler _ (03 Dec 2002)
- Richard M. Smith (03 Dec 2002)
- Steven M. Christey (03 Dec 2002)
- Craig, Scott (03 Dec 2002)
- Jeff Williams (at) Aspect (02 Dec 2002)
- Marc Slemko (02 Dec 2002)
- Alex Russell (02 Dec 2002)
- Alex Lambert (02 Dec 2002)
- Kevin Spett (02 Dec 2002)
- Andrew Jaquith (02 Dec 2002)
- Richard M. Smith (02 Dec 2002)
- Steven M. Christey (02 Dec 2002)
- Alex Russell (02 Dec 2002)
- Keith T. Morgan (02 Dec 2002)
Web Application Analysis Tools?
- Kevin Spett (12 Dec 2002)
- Lars Troen (12 Dec 2002)
- Jeff Williams (at) Aspect (12 Dec 2002)
- Martin Eiszner (12 Dec 2002)
- Kevin Spett (12 Dec 2002)
- David Simcik (12 Dec 2002)
Web single sign-on
- Andrew Chong (11 Dec 2002)
- johneder(at)hushmail.com (10 Dec 2002)
- Greg Gagnon (10 Dec 2002)
- securityarchitect(at)hush.com (09 Dec 2002)
- Sarbjit Singh Gill (09 Dec 2002)
- wbjw(at)mindspring.com (09 Dec 2002)
- Simon Cunningham (09 Dec 2002)
- securityarchitect(at)hush.com (09 Dec 2002)
- Marty (09 Dec 2002)
WebAppSec Training Courses in UK
- Craig_Sullivan(at)Waitrose.co.uk (04 Dec 2002)
- securityarchitect(at)hush.com (04 Dec 2002)
- Craig_Sullivan(at)Waitrose.co.uk (04 Dec 2002)
- Glyn (04 Dec 2002)
- Jeff Williams (at) Aspect (03 Dec 2002)
- Jeff Williams (at) Aspect (03 Dec 2002)
- Kevin Spett (03 Dec 2002)
- Kevin Spett (03 Dec 2002)
- securityarchitect(at)hush.com (03 Dec 2002)
- Glyn Geoghegan (03 Dec 2002)
- Mark Curphey (02 Dec 2002)
- Kevin Spett (02 Dec 2002)
- Dan Cuthbert (02 Dec 2002)
- phuc4(at)hushmail.com (02 Dec 2002)
XSS
- Sverre H. Huseby (19 Dec 2002)
- HarryM (16 Dec 2002)
- appsec(at)technicalinfo.net (15 Dec 2002)
- Matthew Miller (11 Dec 2002)
- Ed Tracy (at) Aspect Security (11 Dec 2002)
- Jeff Williams (at) Aspect (11 Dec 2002)
- Stephen de Vries (11 Dec 2002)
- Matthew Miller (11 Dec 2002)
- Kevin Spett (10 Dec 2002)
- Brett Moore (10 Dec 2002)
- zeno (10 Dec 2002)
- David Endler (10 Dec 2002)
- zeno (10 Dec 2002)
- John Madden (10 Dec 2002)
- Ernesto Funes (10 Dec 2002)
- Kevin Spett (10 Dec 2002)
- Eyal Udassin (10 Dec 2002)
- zeno (10 Dec 2002)
- John Madden (10 Dec 2002)
XSS and URL Encoded Session IDs
- Matthew Miller (17 Dec 2002)
- Ryan Yagatich (17 Dec 2002)
- The Crocodile (17 Dec 2002)
- B F (16 Dec 2002)
XSS Strings
- Tomas (16 Dec 2002)
- Glyn (16 Dec 2002)
- Jeroen Latour (16 Dec 2002)
- Martin Eiszner (16 Dec 2002)
- securityarchitect(at)hush.com (16 Dec 2002)

Last message date: 31 Dec 2002
Archived on: 23 Aug 2006 EDT

166 messages sort by: [ thread ] [ author ] [ date ] [ attachment ]
Other periods:[ Previous, Subject view ] [ Next, Subject view ]

This archive was generated by hypermail 2.1.8 : 23 Aug 2006 EDT