Mailing List Archive For webappsec@securityfocus.com Dec 2002 By Author

• Adam [ckkl]
  • Re: securing web based game (Sun Dec 22 2002 - 19:12:25 EST)
  • Re: securing web based game (Sun Dec 22 2002 - 12:15:06 EST)
• Adrian Wiesmann
  • Re: securing web based game (Sun Dec 22 2002 - 17:41:16 EST)
• Alex Lambert
  • Re: Top Ten Web App Sec Problems (Mon Dec 02 2002 - 19:44:24 EST)
• Alex Russell
  • Re: post to bugtraq about "session fixation" (Wed Dec 18 2002 - 17:49:52 EST)
  • post to bugtraq about "session fixation" (Wed Dec 18 2002 - 15:13:26 EST)
  • Re: Top Ten Web App Sec Problems (Mon Dec 02 2002 - 20:36:29 EST)
  • Re: Top Ten Web App Sec Problems (Mon Dec 02 2002 - 13:19:53 EST)
• Alonso Robles
  • Re: forbidden functions on client-side scripts (Thu Dec 12 2002 - 03:36:39 EST)
• Andrew Chong
  • Re: Web single sign-on (Wed Dec 11 2002 - 04:23:54 EST)
• Andrew Jaquith
  • Java validaton article (Thu Dec 12 2002 - 14:09:39 EST)
  • Re: JSP Security - Limiting URL's (Tue Dec 10 2002 - 09:39:28 EST)
  • Re: Top Ten Web App Sec Problems (Mon Dec 02 2002 - 18:23:12 EST)
• appsec(at)technicalinfo.net
  • Re: XSS (Sun Dec 15 2002 - 17:31:05 EST)
• B F
  • XSS and URL Encoded Session IDs (Mon Dec 16 2002 - 15:18:30 EST)
• b0iler _
  • RE: Top Ten Web App Sec Problems (Tue Dec 03 2002 - 21:52:46 EST)
• Bill Burge
  • Re: Apache module: mod_security (Tue Dec 10 2002 - 10:31:12 EST)
• Bill Pennington
  • Re: Security Paper: Session Fixation Vulnerability in Web-based Applications (Thu Dec 19 2002 - 16:56:07 EST)
• Brett Moore
  • RE: XSS (Tue Dec 10 2002 - 16:59:50 EST)
• Cade Cairns
  • Re: IIS session cookies (Fri Dec 06 2002 - 02:48:34 EST)
  • IIS session cookies (Thu Dec 05 2002 - 17:29:32 EST)
• Cesar
  • Re: post to bugtraq about "session fixation" (Fri Dec 20 2002 - 11:00:19 EST)
• Charles Miller
  • Re: modify non-persistent cookies (Tue Dec 17 2002 - 18:19:41 EST)
• Charlie Root
  • Re: Sequence Identification Routines? (Mon Dec 09 2002 - 13:06:03 EST)
• Choong-Fook Fong
  • Re: modify non-persistent cookies (Thu Dec 19 2002 - 01:22:13 EST)
• Chris Neppes
  • RE: modify non-persistent cookies (Tue Dec 17 2002 - 14:37:18 EST)
• Chris Wysopal
  • Re: SUMMARY modify non-persistent cookies and more q's (Fri Dec 20 2002 - 09:10:02 EST)
• Christopher Todd
  • RE: JDBC PreparedStatements, Java Data Objects/O-R mapping, and SQL Injection (Tue Dec 31 2002 - 15:29:39 EST)
  • JDBC PreparedStatements, Java Data Objects/O-R mapping, and SQL Injection (Mon Dec 30 2002 - 15:29:26 EST)
• Craig, Scott
  • RE: Top Ten Web App Sec Problems (Tue Dec 03 2002 - 08:10:48 EST)
• Craig_Sullivan(at)Waitrose.co.uk
  • Re: Fwd: Security Paper: Session Fixation Vulnerability in Web-based Applications (Fri Dec 20 2002 - 05:15:09 EST)
  • RE: WebAppSec Training Courses in UK (Wed Dec 04 2002 - 13:24:37 EST)
  • RE: WebAppSec Training Courses in UK (Wed Dec 04 2002 - 10:39:40 EST)
• Dan Cuthbert
  • Re: WebAppSec Training Courses in UK (Mon Dec 02 2002 - 16:57:03 EST)
• Dave Aitel
  • Re: JDBC PreparedStatements, Java Data Objects/O-R mapping, and SQL Injection (Mon Dec 30 2002 - 18:14:39 EST)
  • Re: SUMMARY modify non-persistent cookies and more q's (Thu Dec 19 2002 - 10:25:50 EST)
  • Re: Apache module: mod_security (Tue Dec 10 2002 - 09:31:47 EST)
• David Endler
  • RE: XSS (Tue Dec 10 2002 - 13:40:08 EST)
  • OpenHack and OWASP Testing Methodology (Tue Dec 03 2002 - 11:08:36 EST)
• David Simcik
  • Web Application Analysis Tools? (Thu Dec 12 2002 - 12:50:27 EST)
• Dawes, Rogan (ZA - Johannesburg)
  • Mangle available for download (Sun Dec 22 2002 - 11:34:08 EST)
  • RE: SUMMARY modify non-persistent cookies and more q's (Thu Dec 19 2002 - 10:22:38 EST)
  • RE: Sequence Identification Routines? (Tue Dec 10 2002 - 11:23:54 EST)
• Ed Tracy (at) Aspect Security
  • Re: XSS (Wed Dec 11 2002 - 15:15:50 EST)
• Ernesto Funes
  • RE: XSS (Tue Dec 10 2002 - 11:45:25 EST)
• Eyal Udassin
  • RE: XSS (Tue Dec 10 2002 - 10:23:11 EST)
• Forrest Lee Andrews
  • RE: IIS session cookies (Sat Dec 07 2002 - 23:00:23 EST)
• frank fish
  • Can I obtain BASIC AUTH credentials using an XSS vulnerbility (Mon Dec 02 2002 - 10:14:20 EST)
• Gabe Lawrence
  • Re: Apache module: mod_security (Tue Dec 10 2002 - 14:17:51 EST)
• Glyn
  • RE: modify non-persistent cookies (Tue Dec 17 2002 - 11:07:59 EST)
  • RE: XSS Strings (Mon Dec 16 2002 - 06:23:59 EST)
  • RE: WebAppSec Training Courses in UK (Wed Dec 04 2002 - 05:18:51 EST)
• Glyn Geoghegan
  • RE: WebAppSec Training Courses in UK (Tue Dec 03 2002 - 04:54:14 EST)
• Greg Gagnon
  • Re: Web single sign-on (Tue Dec 10 2002 - 12:23:32 EST)
• H D Moore
  • Re: post to bugtraq about "session fixation" (Fri Dec 20 2002 - 14:22:29 EST)
• HarryM
  • Re: XSS (Mon Dec 16 2002 - 01:23:45 EST)
• Ivan Ristic
  • Re: Apache module: mod_security (Tue Dec 10 2002 - 11:35:18 EST)
  • Re: Apache module: mod_security (Tue Dec 10 2002 - 10:43:32 EST)
  • Apache module: mod_security (Tue Dec 10 2002 - 08:37:33 EST)
• Javier Fernández-Sanguino Peña
  • Re: Great XML Security Primer (Mon Dec 09 2002 - 09:48:49 EST)
• jcosta(at)lendleaserei.com
  • Re: OpenHack and OWASP Testing Methodology (Tue Dec 03 2002 - 14:22:46 EST)
• Jeff Williams (at) Aspect
  • Re: JDBC PreparedStatements, Java Data Objects/O-R mapping, and SQL Injection (Mon Dec 30 2002 - 22:37:19 EST)
  • Re: Web Application Analysis Tools? (Thu Dec 12 2002 - 14:08:39 EST)
  • Re: XSS (Wed Dec 11 2002 - 10:57:47 EST)
  • Re: JSP Security - Limiting URL's (Mon Dec 09 2002 - 21:10:46 EST)
  • Re: Sequence Identification Routines? (Mon Dec 09 2002 - 11:00:21 EST)
  • Re: Top Ten Web App Sec Problems (Wed Dec 04 2002 - 10:57:39 EST)
  • Re: WebAppSec Training Courses in UK (Tue Dec 03 2002 - 22:40:13 EST)
  • Re: WebAppSec Training Courses in UK (Tue Dec 03 2002 - 20:56:30 EST)
  • Re: Top Ten Web App Sec Problems (Mon Dec 02 2002 - 21:16:17 EST)
• Jeremy Poteet
  • Re: JSP Security - Limiting URL's (Tue Dec 10 2002 - 09:42:40 EST)
• Jeroen Latour
  • Re: XSS Strings (Mon Dec 16 2002 - 03:49:31 EST)
• Jill Tovey
  • Re: Can I obtain BASIC AUTH credentials using an XSS vulnerbility (Thu Dec 05 2002 - 06:10:36 EST)
• John Madden
  • Re: XSS (Tue Dec 10 2002 - 11:35:55 EST)
  • XSS (Tue Dec 10 2002 - 09:38:53 EST)
• johneder(at)hushmail.com
  • FW: Web single sign-on (Tue Dec 10 2002 - 12:06:06 EST)
• Kapila, Sai
  • RE: IIS session cookies (Sun Dec 08 2002 - 18:57:02 EST)
• Keith T. Morgan
  • Computer world article highliting the importance of webappsec (Thu Dec 05 2002 - 19:39:44 EST)
  • FW: Top Ten Web App Sec Problems (Mon Dec 02 2002 - 11:37:48 EST)
• Kevin Spett
  • Re: JDBC PreparedStatements, Java Data Objects/O-R mapping, and SQL Injection (Mon Dec 30 2002 - 18:48:35 EST)
  • Re: JDBC PreparedStatements, Java Data Objects/O-R mapping, and SQL Injection (Mon Dec 30 2002 - 17:32:13 EST)
  • Re: encoder (Thu Dec 19 2002 - 17:42:26 EST)
  • Re: SUMMARY modify non-persistent cookies and more q's (Thu Dec 19 2002 - 10:38:39 EST)
  • Re: post to bugtraq about "session fixation" (Wed Dec 18 2002 - 16:18:56 EST)
  • Re: modify non-persistent cookies (Wed Dec 18 2002 - 13:20:58 EST)
  • Re: Web Application Analysis Tools? (Thu Dec 12 2002 - 15:54:33 EST)
  • Re: Web Application Analysis Tools? (Thu Dec 12 2002 - 13:47:00 EST)
  • Re: XSS (Tue Dec 10 2002 - 17:33:34 EST)
  • Re: XSS (Tue Dec 10 2002 - 10:26:06 EST)
  • Re: IIS session cookies (Thu Dec 05 2002 - 19:34:15 EST)
  • Re: IIS session cookies (Fri Dec 06 2002 - 10:18:35 EST)
  • Re: WebAppSec Training Courses in UK (Tue Dec 03 2002 - 21:16:02 EST)
  • Re: WebAppSec Training Courses in UK (Tue Dec 03 2002 - 17:27:27 EST)
  • Re: Top Ten Web App Sec Problems (Mon Dec 02 2002 - 18:28:03 EST)
  • Re: WebAppSec Training Courses in UK (Mon Dec 02 2002 - 17:34:55 EST)
• Klaus Doerrscheidt
  • Re: Apache module: mod_security (Tue Dec 10 2002 - 11:02:12 EST)
• Lars Troen
  • RE: Web Application Analysis Tools? (Thu Dec 12 2002 - 13:29:43 EST)
• maddany
  • Re: Sequence Identification Routines? (Mon Dec 09 2002 - 16:27:36 EST)
• Mads Rasmussen
  • ENC: W3C XML encryption specs approved (Wed Dec 11 2002 - 06:36:13 EST)
• Marc Slemko
  • Re: Top Ten Web App Sec Problems (Mon Dec 02 2002 - 20:07:19 EST)
• Mark Curphey
  • Merry Christmas and a Happy New Year. (Fri Dec 20 2002 - 11:57:19 EST)
  • Fwd: Security Paper: Session Fixation Vulnerability in Web-based Applications (Wed Dec 18 2002 - 13:33:38 EST)
  • OWASP Guide Version 2 - New Authors Wanted (Sat Dec 07 2002 - 22:13:08 EST)
  • Re: WebAppSec Training Courses in UK (Mon Dec 02 2002 - 17:43:08 EST)
  • Great XML Security Primer (Sun Dec 01 2002 - 10:52:05 EST)
• Martin Eiszner
  • Re: XSS Strings (Mon Dec 16 2002 - 03:39:50 EST)
  • Re: Web Application Analysis Tools? (Thu Dec 12 2002 - 13:20:31 EST)
• Marty
  • Web single sign-on (Mon Dec 09 2002 - 13:11:46 EST)
• Matthew Miller
  • Re: XSS and URL Encoded Session IDs (Tue Dec 17 2002 - 11:56:39 EST)
  • Re: XSS (Wed Dec 11 2002 - 16:29:31 EST)
  • Re: XSS (Wed Dec 11 2002 - 08:03:49 EST)
• MICHAEL GERMONY
  • Re: modify non-persistent cookies (Tue Dec 17 2002 - 14:17:19 EST)
• Michael Howard
  • RE: JDBC PreparedStatements, Java Data Objects/O-R mapping, and SQL Injection (Tue Dec 31 2002 - 14:34:07 EST)
  • RE: IIS session cookies (Fri Dec 06 2002 - 11:42:41 EST)
• mlh(at)zip.com.au
  • Re: JSP Security - Limiting URL's (Tue Dec 10 2002 - 17:09:46 EST)
• mono toy
  • SUMMARY modify non-persistent cookies and more q's (Thu Dec 19 2002 - 09:14:32 EST)
  • modify non-persistent cookies (Tue Dec 17 2002 - 05:55:49 EST)
• Mr. Rufus Faloofus
  • Re: modify non-persistent cookies (Tue Dec 17 2002 - 20:44:23 EST)
• N30
  • encoder (Thu Dec 19 2002 - 17:10:17 EST)
• Nick Jacobsen
  • Sequence Identification Routines? (Mon Dec 09 2002 - 03:51:50 EST)
• Panayiotis A. Thermos
  • Re: post to bugtraq about "session fixation" (Wed Dec 18 2002 - 15:49:31 EST)
• Peter Conrad
  • Re: modify non-persistent cookies (Tue Dec 17 2002 - 10:43:46 EST)
• phuc4(at)hushmail.com
  • WebAppSec Training Courses in UK (Mon Dec 02 2002 - 11:07:29 EST)
• Richard M. Smith
  • RE: Top Ten Web App Sec Problems (Tue Dec 03 2002 - 16:41:02 EST)
  • RE: Top Ten Web App Sec Problems (Mon Dec 02 2002 - 18:13:28 EST)
• Ryan Yagatich
  • Re: XSS and URL Encoded Session IDs (Tue Dec 17 2002 - 06:21:38 EST)
• Sarbjit Singh Gill
  • RE: Web single sign-on (Mon Dec 09 2002 - 16:36:50 EST)
• securityarchitect(at)hush.com
  • Re: post to bugtraq about "session fixation" (Wed Dec 18 2002 - 14:28:34 EST)
  • Re: modify non-persistent cookies (Tue Dec 17 2002 - 18:05:34 EST)
  • XSS Strings (Mon Dec 16 2002 - 02:54:52 EST)
  • RE: Sequence Identification Routines? (Tue Dec 10 2002 - 13:02:33 EST)
  • JSP Security - Limiting URL's (Mon Dec 09 2002 - 17:42:56 EST)
  • RE: Web single sign-on (Mon Dec 09 2002 - 16:43:17 EST)
  • Re: Web single sign-on (Mon Dec 09 2002 - 14:54:46 EST)
  • Re: IIS session cookies (Sat Dec 07 2002 - 21:51:48 EST)
  • RE: WebAppSec Training Courses in UK (Wed Dec 04 2002 - 12:02:30 EST)
  • RE: WebAppSec Training Courses in UK (Tue Dec 03 2002 - 14:08:39 EST)
• Shimon Silberschlag
  • forbidden functions on client-side scripts (Wed Dec 11 2002 - 12:06:18 EST)
• Simon Cunningham
  • RE: Web single sign-on (Mon Dec 09 2002 - 15:26:38 EST)
• St. Clair, James
  • RE: Computer world article highlighting the importance of webapps ec (Mon Dec 09 2002 - 07:31:48 EST)
• Stephen de Vries
  • Re: XSS (Wed Dec 11 2002 - 06:00:02 EST)
• Steve Posick
  • Re: JSP Security - Limiting URL's (Tue Dec 10 2002 - 09:48:02 EST)
• Steven M. Christey
  • Re: post to bugtraq about "session fixation" (Thu Dec 19 2002 - 17:37:55 EST)
  • Re: Top Ten Web App Sec Problems (Wed Dec 04 2002 - 16:39:10 EST)
  • RE: Top Ten Web App Sec Problems (Tue Dec 03 2002 - 15:57:05 EST)
  • Re: Top Ten Web App Sec Problems (Mon Dec 02 2002 - 16:33:55 EST)
• Sverre H. Huseby
  • Re: XSS (Thu Dec 19 2002 - 15:27:25 EST)
  • Re: Fwd: Security Paper: Session Fixation Vulnerability in Web-based Applications (Thu Dec 19 2002 - 14:45:48 EST)
• Takayuki Nakamura
  • Re: IIS session cookies (Thu Dec 05 2002 - 23:43:41 EST)
• The Crocodile
  • RE: XSS and URL Encoded Session IDs (Tue Dec 17 2002 - 07:10:12 EST)
• Thor Larholm
  • RE: forbidden functions on client-side scripts (Fri Dec 13 2002 - 07:21:17 EST)
• Tim Aranki
  • Re: securing web based game (Mon Dec 23 2002 - 11:13:09 EST)
• Tomas
  • Re: securing web based game (Mon Dec 23 2002 - 03:31:47 EST)
  • securing web based game (Sun Dec 22 2002 - 09:33:35 EST)
  • Re: XSS Strings (Mon Dec 16 2002 - 06:42:40 EST)
• Tony Welsh
  • RE: Sequence Identification Routines? (Mon Dec 09 2002 - 15:18:11 EST)
• UDP 53
  • Re: Hijacking URL Encoded Session IDs using Referer Logs (Thu Dec 05 2002 - 07:42:06 EST)
• Uzi Refaeli
  • RE: modify non-persistent cookies (Wed Dec 18 2002 - 02:18:03 EST)
  • RE: forbidden functions on client-side scripts (Thu Dec 12 2002 - 02:12:19 EST)
• Venkat, Sanjay
  • RE: modify non-persistent cookies (Tue Dec 17 2002 - 17:57:01 EST)
• wbjw(at)mindspring.com
  • Re: Web single sign-on (Mon Dec 09 2002 - 16:06:03 EST)
• zeno
  • Re: modify non-persistent cookies (Tue Dec 17 2002 - 21:48:20 EST)
  • Re: XSS (Tue Dec 10 2002 - 16:59:44 EST)
  • Re: Apache module: mod_security (Tue Dec 10 2002 - 13:13:15 EST)
  • Re: XSS (Tue Dec 10 2002 - 13:35:38 EST)
  • Re: XSS (Tue Dec 10 2002 - 09:57:39 EST)

  This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:07:55 EDT