Mailing List Archive For webappsec@securityfocus.com Dec 2002 By Subject

• Apache module: mod_security
  • Gabe Lawrence (Tue Dec 10 2002 - 14:17:51 EST)
  • zeno (Tue Dec 10 2002 - 13:13:15 EST)
  • Ivan Ristic (Tue Dec 10 2002 - 11:35:18 EST)
  • Klaus Doerrscheidt (Tue Dec 10 2002 - 11:02:12 EST)
  • Ivan Ristic (Tue Dec 10 2002 - 10:43:32 EST)
  • Bill Burge (Tue Dec 10 2002 - 10:31:12 EST)
  • Dave Aitel (Tue Dec 10 2002 - 09:31:47 EST)
  • Ivan Ristic (Tue Dec 10 2002 - 08:37:33 EST)
• Can I obtain BASIC AUTH credentials using an XSS vulnerbility
  • Jill Tovey (Thu Dec 05 2002 - 06:10:36 EST)
  • frank fish (Mon Dec 02 2002 - 10:14:20 EST)
• Computer world article highlighting the importance of webapps ec
  • St. Clair, James (Mon Dec 09 2002 - 07:31:48 EST)
• Computer world article highliting the importance of webappsec
  • Keith T. Morgan (Thu Dec 05 2002 - 19:39:44 EST)
• ENC: W3C XML encryption specs approved
  • Mads Rasmussen (Wed Dec 11 2002 - 06:36:13 EST)
• encoder
  • Kevin Spett (Thu Dec 19 2002 - 17:42:26 EST)
  • N30 (Thu Dec 19 2002 - 17:10:17 EST)
• forbidden functions on client-side scripts
  • Thor Larholm (Fri Dec 13 2002 - 07:21:17 EST)
  • Alonso Robles (Thu Dec 12 2002 - 03:36:39 EST)
  • Uzi Refaeli (Thu Dec 12 2002 - 02:12:19 EST)
  • Shimon Silberschlag (Wed Dec 11 2002 - 12:06:18 EST)
• Fwd: Security Paper: Session Fixation Vulnerability in Web-based Applications
  • Craig_Sullivan(at)Waitrose.co.uk (Fri Dec 20 2002 - 05:15:09 EST)
  • Sverre H. Huseby (Thu Dec 19 2002 - 14:45:48 EST)
  • Mark Curphey (Wed Dec 18 2002 - 13:33:38 EST)
• Great XML Security Primer
  • Javier Fernández-Sanguino Peña (Mon Dec 09 2002 - 09:48:49 EST)
  • Mark Curphey (Sun Dec 01 2002 - 10:52:05 EST)
• Hijacking URL Encoded Session IDs using Referer Logs
  • UDP 53 (Thu Dec 05 2002 - 07:42:06 EST)
• IIS session cookies
  • Kapila, Sai (Sun Dec 08 2002 - 18:57:02 EST)
  • Forrest Lee Andrews (Sat Dec 07 2002 - 23:00:23 EST)
  • securityarchitect(at)hush.com (Sat Dec 07 2002 - 21:51:48 EST)
  • Takayuki Nakamura (Thu Dec 05 2002 - 23:43:41 EST)
  • Kevin Spett (Thu Dec 05 2002 - 19:34:15 EST)
  • Cade Cairns (Fri Dec 06 2002 - 02:48:34 EST)
  • Kevin Spett (Fri Dec 06 2002 - 10:18:35 EST)
  • Michael Howard (Fri Dec 06 2002 - 11:42:41 EST)
  • Cade Cairns (Thu Dec 05 2002 - 17:29:32 EST)
• Java validaton article
  • Andrew Jaquith (Thu Dec 12 2002 - 14:09:39 EST)
• JDBC PreparedStatements, Java Data Objects/O-R mapping, and SQL Injection
  • Christopher Todd (Tue Dec 31 2002 - 15:29:39 EST)
  • Michael Howard (Tue Dec 31 2002 - 14:34:07 EST)
  • Jeff Williams (at) Aspect (Mon Dec 30 2002 - 22:37:19 EST)
  • Kevin Spett (Mon Dec 30 2002 - 18:48:35 EST)
  • Dave Aitel (Mon Dec 30 2002 - 18:14:39 EST)
  • Kevin Spett (Mon Dec 30 2002 - 17:32:13 EST)
  • Christopher Todd (Mon Dec 30 2002 - 15:29:26 EST)
• JSP Security - Limiting URL's
  • mlh(at)zip.com.au (Tue Dec 10 2002 - 17:09:46 EST)
  • Jeremy Poteet (Tue Dec 10 2002 - 09:42:40 EST)
  • Steve Posick (Tue Dec 10 2002 - 09:48:02 EST)
  • Andrew Jaquith (Tue Dec 10 2002 - 09:39:28 EST)
  • Jeff Williams (at) Aspect (Mon Dec 09 2002 - 21:10:46 EST)
  • securityarchitect(at)hush.com (Mon Dec 09 2002 - 17:42:56 EST)
• Mangle available for download
  • Dawes, Rogan (ZA - Johannesburg) (Sun Dec 22 2002 - 11:34:08 EST)
• Merry Christmas and a Happy New Year.
  • Mark Curphey (Fri Dec 20 2002 - 11:57:19 EST)
• modify non-persistent cookies
  • Choong-Fook Fong (Thu Dec 19 2002 - 01:22:13 EST)
  • Kevin Spett (Wed Dec 18 2002 - 13:20:58 EST)
  • Uzi Refaeli (Wed Dec 18 2002 - 02:18:03 EST)
  • zeno (Tue Dec 17 2002 - 21:48:20 EST)
  • Mr. Rufus Faloofus (Tue Dec 17 2002 - 20:44:23 EST)
  • Charles Miller (Tue Dec 17 2002 - 18:19:41 EST)
  • securityarchitect(at)hush.com (Tue Dec 17 2002 - 18:05:34 EST)
  • Venkat, Sanjay (Tue Dec 17 2002 - 17:57:01 EST)
  • Chris Neppes (Tue Dec 17 2002 - 14:37:18 EST)
  • MICHAEL GERMONY (Tue Dec 17 2002 - 14:17:19 EST)
  • Glyn (Tue Dec 17 2002 - 11:07:59 EST)
  • Peter Conrad (Tue Dec 17 2002 - 10:43:46 EST)
  • mono toy (Tue Dec 17 2002 - 05:55:49 EST)
• OpenHack and OWASP Testing Methodology
  • jcosta(at)lendleaserei.com (Tue Dec 03 2002 - 14:22:46 EST)
  • David Endler (Tue Dec 03 2002 - 11:08:36 EST)
• OWASP Guide Version 2 - New Authors Wanted
  • Mark Curphey (Sat Dec 07 2002 - 22:13:08 EST)
• post to bugtraq about "session fixation"
  • H D Moore (Fri Dec 20 2002 - 14:22:29 EST)
  • Cesar (Fri Dec 20 2002 - 11:00:19 EST)
  • Steven M. Christey (Thu Dec 19 2002 - 17:37:55 EST)
  • Alex Russell (Wed Dec 18 2002 - 17:49:52 EST)
  • Kevin Spett (Wed Dec 18 2002 - 16:18:56 EST)
  • Panayiotis A. Thermos (Wed Dec 18 2002 - 15:49:31 EST)
  • securityarchitect(at)hush.com (Wed Dec 18 2002 - 14:28:34 EST)
  • Alex Russell (Wed Dec 18 2002 - 15:13:26 EST)
• securing web based game
  • Tim Aranki (Mon Dec 23 2002 - 11:13:09 EST)
  • Tomas (Mon Dec 23 2002 - 03:31:47 EST)
  • Adam [ckkl] (Sun Dec 22 2002 - 19:12:25 EST)
  • Adrian Wiesmann (Sun Dec 22 2002 - 17:41:16 EST)
  • Adam [ckkl] (Sun Dec 22 2002 - 12:15:06 EST)
  • Tomas (Sun Dec 22 2002 - 09:33:35 EST)
• Security Paper: Session Fixation Vulnerability in Web-based Applications
  • Bill Pennington (Thu Dec 19 2002 - 16:56:07 EST)
• Sequence Identification Routines?
  • securityarchitect(at)hush.com (Tue Dec 10 2002 - 13:02:33 EST)
  • Dawes, Rogan (ZA - Johannesburg) (Tue Dec 10 2002 - 11:23:54 EST)
  • maddany (Mon Dec 09 2002 - 16:27:36 EST)
  • Tony Welsh (Mon Dec 09 2002 - 15:18:11 EST)
  • Jeff Williams (at) Aspect (Mon Dec 09 2002 - 11:00:21 EST)
  • Charlie Root (Mon Dec 09 2002 - 13:06:03 EST)
  • Nick Jacobsen (Mon Dec 09 2002 - 03:51:50 EST)
• SUMMARY modify non-persistent cookies and more q's
  • Chris Wysopal (Fri Dec 20 2002 - 09:10:02 EST)
  • Kevin Spett (Thu Dec 19 2002 - 10:38:39 EST)
  • Dave Aitel (Thu Dec 19 2002 - 10:25:50 EST)
  • Dawes, Rogan (ZA - Johannesburg) (Thu Dec 19 2002 - 10:22:38 EST)
  • mono toy (Thu Dec 19 2002 - 09:14:32 EST)
• Top Ten Web App Sec Problems
  • Steven M. Christey (Wed Dec 04 2002 - 16:39:10 EST)
  • Jeff Williams (at) Aspect (Wed Dec 04 2002 - 10:57:39 EST)
  • b0iler _ (Tue Dec 03 2002 - 21:52:46 EST)
  • Richard M. Smith (Tue Dec 03 2002 - 16:41:02 EST)
  • Steven M. Christey (Tue Dec 03 2002 - 15:57:05 EST)
  • Craig, Scott (Tue Dec 03 2002 - 08:10:48 EST)
  • Jeff Williams (at) Aspect (Mon Dec 02 2002 - 21:16:17 EST)
  • Marc Slemko (Mon Dec 02 2002 - 20:07:19 EST)
  • Alex Russell (Mon Dec 02 2002 - 20:36:29 EST)
  • Alex Lambert (Mon Dec 02 2002 - 19:44:24 EST)
  • Kevin Spett (Mon Dec 02 2002 - 18:28:03 EST)
  • Andrew Jaquith (Mon Dec 02 2002 - 18:23:12 EST)
  • Richard M. Smith (Mon Dec 02 2002 - 18:13:28 EST)
  • Steven M. Christey (Mon Dec 02 2002 - 16:33:55 EST)
  • Alex Russell (Mon Dec 02 2002 - 13:19:53 EST)
  • Keith T. Morgan (Mon Dec 02 2002 - 11:37:48 EST)
• Web Application Analysis Tools?
  • Kevin Spett (Thu Dec 12 2002 - 15:54:33 EST)
  • Lars Troen (Thu Dec 12 2002 - 13:29:43 EST)
  • Jeff Williams (at) Aspect (Thu Dec 12 2002 - 14:08:39 EST)
  • Martin Eiszner (Thu Dec 12 2002 - 13:20:31 EST)
  • Kevin Spett (Thu Dec 12 2002 - 13:47:00 EST)
  • David Simcik (Thu Dec 12 2002 - 12:50:27 EST)
• Web single sign-on
  • Andrew Chong (Wed Dec 11 2002 - 04:23:54 EST)
  • johneder(at)hushmail.com (Tue Dec 10 2002 - 12:06:06 EST)
  • Greg Gagnon (Tue Dec 10 2002 - 12:23:32 EST)
  • securityarchitect(at)hush.com (Mon Dec 09 2002 - 16:43:17 EST)
  • Sarbjit Singh Gill (Mon Dec 09 2002 - 16:36:50 EST)
  • wbjw(at)mindspring.com (Mon Dec 09 2002 - 16:06:03 EST)
  • Simon Cunningham (Mon Dec 09 2002 - 15:26:38 EST)
  • securityarchitect(at)hush.com (Mon Dec 09 2002 - 14:54:46 EST)
  • Marty (Mon Dec 09 2002 - 13:11:46 EST)
• WebAppSec Training Courses in UK
  • Craig_Sullivan(at)Waitrose.co.uk (Wed Dec 04 2002 - 13:24:37 EST)
  • securityarchitect(at)hush.com (Wed Dec 04 2002 - 12:02:30 EST)
  • Craig_Sullivan(at)Waitrose.co.uk (Wed Dec 04 2002 - 10:39:40 EST)
  • Glyn (Wed Dec 04 2002 - 05:18:51 EST)
  • Jeff Williams (at) Aspect (Tue Dec 03 2002 - 22:40:13 EST)
  • Jeff Williams (at) Aspect (Tue Dec 03 2002 - 20:56:30 EST)
  • Kevin Spett (Tue Dec 03 2002 - 21:16:02 EST)
  • Kevin Spett (Tue Dec 03 2002 - 17:27:27 EST)
  • securityarchitect(at)hush.com (Tue Dec 03 2002 - 14:08:39 EST)
  • Glyn Geoghegan (Tue Dec 03 2002 - 04:54:14 EST)
  • Mark Curphey (Mon Dec 02 2002 - 17:43:08 EST)
  • Kevin Spett (Mon Dec 02 2002 - 17:34:55 EST)
  • Dan Cuthbert (Mon Dec 02 2002 - 16:57:03 EST)
  • phuc4(at)hushmail.com (Mon Dec 02 2002 - 11:07:29 EST)
• XSS
  • Sverre H. Huseby (Thu Dec 19 2002 - 15:27:25 EST)
  • HarryM (Mon Dec 16 2002 - 01:23:45 EST)
  • appsec(at)technicalinfo.net (Sun Dec 15 2002 - 17:31:05 EST)
  • Matthew Miller (Wed Dec 11 2002 - 16:29:31 EST)
  • Ed Tracy (at) Aspect Security (Wed Dec 11 2002 - 15:15:50 EST)
  • Jeff Williams (at) Aspect (Wed Dec 11 2002 - 10:57:47 EST)
  • Stephen de Vries (Wed Dec 11 2002 - 06:00:02 EST)
  • Matthew Miller (Wed Dec 11 2002 - 08:03:49 EST)
  • Kevin Spett (Tue Dec 10 2002 - 17:33:34 EST)
  • Brett Moore (Tue Dec 10 2002 - 16:59:50 EST)
  • zeno (Tue Dec 10 2002 - 16:59:44 EST)
  • David Endler (Tue Dec 10 2002 - 13:40:08 EST)
  • zeno (Tue Dec 10 2002 - 13:35:38 EST)
  • John Madden (Tue Dec 10 2002 - 11:35:55 EST)
  • Ernesto Funes (Tue Dec 10 2002 - 11:45:25 EST)
  • Kevin Spett (Tue Dec 10 2002 - 10:26:06 EST)
  • Eyal Udassin (Tue Dec 10 2002 - 10:23:11 EST)
  • zeno (Tue Dec 10 2002 - 09:57:39 EST)
  • John Madden (Tue Dec 10 2002 - 09:38:53 EST)
• XSS and URL Encoded Session IDs
  • Matthew Miller (Tue Dec 17 2002 - 11:56:39 EST)
  • Ryan Yagatich (Tue Dec 17 2002 - 06:21:38 EST)
  • The Crocodile (Tue Dec 17 2002 - 07:10:12 EST)
  • B F (Mon Dec 16 2002 - 15:18:30 EST)
• XSS Strings
  • Tomas (Mon Dec 16 2002 - 06:42:40 EST)
  • Glyn (Mon Dec 16 2002 - 06:23:59 EST)
  • Jeroen Latour (Mon Dec 16 2002 - 03:49:31 EST)
  • Martin Eiszner (Mon Dec 16 2002 - 03:39:50 EST)
  • securityarchitect(at)hush.com (Mon Dec 16 2002 - 02:54:52 EST)

  This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:07:55 EDT