security.web-applications (date)

September 30, 2005

Re: Must we authenticate login forms (using SSL?)?, Eoin Keary
SAS 70 and software policies, James Strassburg
Administrivia: At Ruxcon this weekend, Andrew van der Stock
Re: Must we authenticate login forms (using SSL?)?, Antoine Martin
Re: Must we authenticate login forms (using SSL?)?, Rogan Dawes
RE: Must we authenticate login forms (using SSL?)?, Nathaniel S. H. Brown
REPOST: "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein, Amit Klein (AKsecurity)
Re: Must we authenticate login forms (using SSL?)?, Peter Conrad
RE: Must we authenticate login forms (using SSL?)?, Nathaniel S. H. Brown
Re: Must we authenticate login forms (using SSL?)?, mike03051
Re: Must we authenticate login forms (using SSL?)?, Antoine Martin

September 29, 2005

Re: Must we authenticate login forms (using SSL?)?, info
Must we authenticate login forms (using SSL?)?, Amir Herzberg

September 28, 2005

Re: NTLM and man-in-the-middle proxies not working, AG
Use JCap library to read network traffic, yuthikasgp

September 27, 2005

Re: webappsec Digest 21 Sep 2005 21:26:31 -0000 Issue 636, Amir Herzberg
RE: NTLM and man-in-the-middle proxies not working, Ofer Maor

September 26, 2005

Re: NTLM and man-in-the-middle proxies not working, raymond_b_jimenez
Almost Here!!: 2nd US OWASP AppSec Conference - Oct 11-12 - Near DC, Dave Wichers
PacSec05, Dragos Ruiu

September 25, 2005

Re: Ajax Security discussion for the OWASP Guide, focus

September 24, 2005

Re: Ajax Security discussion for the OWASP Guide, John Manko

September 23, 2005

Re: Ajax Security discussion for the OWASP Guide, Andre Ludwig
Re: Ajax Security discussion for the OWASP Guide, noname
RE: Ajax Security discussion for the OWASP Guide, Luke Fraser
Re: Ajax Security discussion for the OWASP Guide, Serg Belokamen
Ajax Security discussion for the OWASP Guide, Andrew van der Stock
HTTP Request Smuggling - ERRATA (the IIS 48K buffer phenomenon), Amit Klein (AKsecurity)
Re: NTLM and man-in-the-middle proxies not working, lists
Re: NTLM and man-in-the-middle proxies not working, Amit Klein (AKsecurity)
Re: Is netcraft publishing URL of your intranet sites?, Darren Bounds

September 22, 2005

Re: Is netcraft publishing URL of your intranet sites?, Saqib Ali

September 21, 2005

Re: NTLM and man-in-the-middle proxies not working, Amit Klein (AKsecurity)
RE: Chroot jails, Wall, Kevin
Re: Chroot jails, Paul Wong
Re: Chroot jails, Antoine Martin
RE: Chroot jails, Craig Wright
Re: Chroot jails, xyberpix
RE: NTLM and man-in-the-middle proxies not working, raymond_b_jimenez
Re: NTLM and man-in-the-middle proxies not working, Amit Klein (AKsecurity)
Re: Chroot jails, Ingo Struck
Re: NTLM and man-in-the-middle proxies not working, Michael Eddington
Re: HTML/Java Protection, Yousef Syed
Re: Re: Defending users of unprotected login pages with TrustBar 0.4.9.93, mike03051

September 20, 2005

Re: Chroot jails, Mamading Ceesay
Re: Chroot jails, Antoine Martin
Re: Chroot jails, JamesHorwath
Chroot jails, Steve.Cummings
Re: HTML/Java Protection, Roshen Chandran
Re: Defending users of unprotected login pages with TrustBar 0.4.9.93, Amir Herzberg
Re: Re: Defending users of unprotected login pages with TrustBar 0.4.9.93, Peter Conrad
Re: HTML/Java Protection, Antoine Martin
Re: HTML/Java Protection, Mark Quinn
Re: HTML/Java Protection, Peter Conrad
Re: Re: Defending users of unprotected login pages with TrustBar 0.4.9.93, mike03051
Re: Re: Online quiz for CISSP (new material), conner911
HTML/Java Protection, confusionvalley
Re: NTLM and man-in-the-middle proxies not working, Amit Klein (AKsecurity)

September 19, 2005

Re: Defending users of unprotected login pages with TrustBar 0.4.9.93, J. Lambrecht
Re: Defending users of unprotected login pages with TrustBar 0.4.9.93, Nathan Jackson-Eeles
Re: Defending users of unprotected login pages with TrustBar 0.4.9.93, mike03051
Re: NTLM and man-in-the-middle proxies not working, Eoin Keary
Defending users of unprotected login pages with TrustBar 0.4.9.93, Amir Herzberg
RUXCON 2005 Update, RUXCON Call for Papers
Re: Web Application Security Analyzer for PHP-Nuke/phpBB CMS, Paul Laudanski
Re: Is netcraft publishing URL of your intranet sites?, Saqib Ali
Re: Web Application Security Analyzer for PHP-Nuke/phpBB CMS, jimz
Re: Is netcraft publishing URL of your intranet sites?, Darren Bounds

September 18, 2005

Re: Web Application Security Analyzer for PHP-Nuke/phpBB CMS, jimz
Re: Is netcraft publishing URL of your intranet sites?, Darren Bounds

September 17, 2005

Re: Online quiz for CISSP (new material), Saqib Ali
Re: Federated Authentication (without SAML), Mamading Ceesay
Re: Federated Authentication (without SAML), Scovetta Labs
Re: Core Application's for Banks, Andrew van der Stock
Core Application's for Banks, Lila Buchalski
Federated Authentication (without SAML), Gary Gwin
Web Application Security Analyzer for PHP-Nuke/phpBB CMS, Paul Laudanski

September 16, 2005

Re: NTLM and man-in-the-middle proxies not working, Amit Klein (AKsecurity)
Research paper on WSE Policy Advisor, Andy Gordon
Fwd: OWASP NYC Chapter Meeting - Sept 28th, Andrew van der Stock
RE: OWASP NYC Chapter Meeting - Sept 28th, Stan Guzik
Re: Is netcraft publishing URL of your intranet sites?, Saqib Ali
Re: NTLM and man-in-the-middle proxies not working, raymond_b_jimenez

September 15, 2005

Re: OWASP NYC Chapter Meeting - Sept 28th, bugtraq
OWASP NYC Chapter Meeting - Sept 28th, peter . stern
Re: security of _notes dirs, Mailing List
Re: security of _notes dirs, Peter Conrad
Re: security of _notes dirs, Greg
Re: security of _notes dirs, Mailing List
Re: security of _notes dirs, Michael Acadia
Re: NTLM and man-in-the-middle proxies not working, Amit Klein (AKsecurity)
RE: security of _notes dirs, Mailing List
Re: simplicity improves security?, Robert Hajime Lanning
RE: simplicity improves security?, Simon Zuckerbraun
Online quiz for CISSP (new material), Saqib Ali
NTLM and man-in-the-middle proxies not working, raymond_b_jimenez

September 13, 2005

simplicity improves security?, Saqib Ali
Is netcraft publishing URL of your intranet sites?, Saqib Ali
Re: web application testing framework, Stephen de Vries
RE: web application testing framework, Dan Cornell
Re: web application testing framework, Patrick Debois
RE: Ajax security reference, Balaji
web application testing framework, Serg Belokamen
Re: Ajax security reference, Eoin Keary

September 12, 2005

Re: Ajax security reference, Jean-Jacques Halans
RE: security of _notes dirs, michael acadia
Re: Security Issues with Workflow apps, Anthony Chan
RE: security of _notes dirs, Griffiths, Ian
security of _notes dirs, Mailing List
Re: Security Issues with Workflow apps, Saqib Ali

September 11, 2005

Re: Security Issues with Workflow apps, Anthony Chan

September 09, 2005

Re: Obfuscating IIS 6.0, Ademar Gonzalez
Obfuscating IIS 6.0, Bénoni MARTIN

September 08, 2005

Security Issues with Workflow apps, Saqib Ali
Re: BBCode [IMG] [/IMG] Tag Vulnerability, Paul Laudanski

September 07, 2005

Re: Combatting automated download of dynamic websites?, Eoin Keary
Security Issues with Foxpro 6, nitin patel

September 06, 2005

RE: Defeating CAPTCHA, Derick Anderson
ANN: WebGoat 3.7 - Application Security hands-on learning environment, Jeff Williams
ASP.NET Forms Based Auth Whitepaper, Mark Curphey
Re: Ajax security reference, bugtraq
RE: Ajax security reference, Damhuis Anton
Re: Ajax security reference, John Manko
Re: Ajax security reference, Serg Belokamen
Re: Ajax security reference, John Manko

September 05, 2005

Early Registration Ending Soon: 2nd US OWASP AppSec Conference - Oct 11-12 - Near DC, Dave Wichers
Re: Code Signing ???, Saqib Ali
Re: Code Signing ???, Olaf Reitmaier Veracierta
Re: Combatting automated download of dynamic websites?, Javier Fernandez-Sanguino
Re: Combatting automated download of dynamic websites?, Paul M.
Re: Defeating CAPTCHA, Devdas Bhagat
Re: Code Signing ???, Saqib Ali

September 03, 2005

Re: Ajax security reference, Serg Belokamen
Re: Oracle TNS listener, Esteban Martinez Fayo
Re: Oracle TNS listener, Achim Hoffmann
Ajax security reference, Luke Fraser

September 02, 2005

Oracle TNS listener, Chitresh Sen

September 01, 2005

Fwd: Combatting automated download of dynamic websites?, Mark Quinn
Re: Combatting automated download of dynamic websites?, Eoin Keary
Re: Combatting automated download of dynamic websites?, Achim Hoffmann
Re: Defeating CAPTCHA, Christopher Kunz