security.web-applications (thread)

J2EE Application Security Code Review, Yousef Syed
- Re: J2EE Application Security Code Review, Eoin Keary
- Re: J2EE Application Security Code Review, Andrew van der Stock
- Re: J2EE Application Security Code Review, crazy frog crazy frog
- RE: J2EE Application Security Code Review, Prashant Shirangare
  - Re: J2EE Application Security Code Review, Dean H. Saxe
- RE: J2EE Application Security Code Review, Evans, Arian
- RE: J2EE Application Security Code Review, Jeff Robertson
  - Re: J2EE Application Security Code Review, Dean H. Saxe
Multiple vulnerabilities within RockLiffe MailSite Express WebMail, Paul Craig
Smells like a phish, is a fish?, Andrew van der Stock
- Re: Smells like a phish, is a fish?, Mat Farrington
- Re: Smells like a phish, is a fish?, Cory Foy
- Re: Smells like a phish, is a fish?, Mike Kuriger
  - Re: Smells like a phish, is a fish?, Todd Hendricks
- RE: Smells like a phish, is a fish?, Ofer Shezaf
- RE: Smells like a phish, is a fish?, Damhuis Anton
  - RE: Smells like a phish, is a fish?, M. Burnett
  - RE: Smells like a phish, is a fish?, Christopher Reed
- RE: Smells like a phish, is a fish?, Tom Stowell
- RE: Smells like a phish, is a fish?, Damhuis Anton
- RE: Smells like a phish, is a fish?, Tom Stowell
  - RE: Smells like a phish, is a fish?, Lyal Collins
    - Re: Smells like a phish, is a fish?, Devdas Bhagat
    - RE: Smells like a phish, is a fish?, Lyal Collins
Help required in Owasp.net's move from DotNetNuke to CommunityServer, Mike de Libero
RE: (conclusion) GET and POST Methods Accepted, Evans, Arian
SF new article announcement: Collaborative endpoint security, part one, Andrew van der Stock
phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit., Paul Laudanski
- Re: phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit., Tatercrispies
  - Re: phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit., Paul Laudanski
    - Re: phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit., Tatercrispies
- Re: phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit., Nicob
  - Re: Re: phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit., Tatercrispies
    - Re: Re: phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit., Nicob
  - Re: phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit., Paul Laudanski
ISO cert, budsplacecustomcomputers
SecurityFocus Article: The click-wrap conundrum, Andrew van der Stock
CFP: The First International Conference on Availability, Reliability and Security (AReS 2006), 20-22 April, 2006, Vienna, Austria, Manh Tho
webapp audit and forensics, Serg Belokamen
- RE: webapp audit and forensics, Griffiths, Ian
  - Re: webapp audit and forensics, crazy frog crazy frog
    - Re: webapp audit and forensics, Dhruv Soi
    - webapp audit and forensics, Serg B.
- RE: webapp audit and forensics, Jason Gregson
- Re: RE: webapp audit and forensics, f_kenisky
Oracle 10g - emagent.exe Stack-Based Overflow, SPI Labs
SecurityFocus article announcement: Two-factor banking, Andrew van der Stock
Hit Throttling - Content Theft Prevention, Nik Cubrilovic
- Re: Hit Throttling - Content Theft Prevention, Kurt Seifried
  - Re: Hit Throttling - Content Theft Prevention, Nik Cubrilovic
    - Re: Hit Throttling - Content Theft Prevention, Peter Conrad
    - Re: Hit Throttling - Content Theft Prevention, Eoin Keary
    - Re: Hit Throttling - Content Theft Prevention, Kurt Seifried
    - Re: Hit Throttling - Content Theft Prevention, Steve Shah
    - Re: Hit Throttling - Content Theft Prevention, focus
    - Re: Hit Throttling - Content Theft Prevention, Nik Cubrilovic
- Re: Hit Throttling - Content Theft Prevention, WebAppSec
Importing large code piece into Javascript context without SCRIPT SRC=..., Amit Klein (AKsecurity)
- Re: Importing large code piece into Javascript context without SCRIPT SRC=..., Amit Klein (AKsecurity)
RE: myspace hack (History of XSS), Jeff Robertson
- Re: myspace hack (History of XSS), Jeremiah Grossman
RE: (clarification) GET and POST Methods Accepted (testing guide version), Evans, Arian
RE: (clarification) GET and POST Methods Accepted, Evans, Arian
- RE: (clarification) GET and POST Methods Accepted, Joe Teff
- RE: (clarification) GET and POST Methods Accepted, Amit Klein (AKsecurity)
- RE: (clarification) GET and POST Methods Accepted, Thomas Schreiber
- RE: (clarification) GET and POST Methods Accepted, Jeff Robertson
- RE: (clarification) GET and POST Methods Accepted, Amit Klein (AKsecurity)
  - Re: (clarification) GET and POST Methods Accepted, Andrew van der Stock
- RE: (clarification) GET and POST Methods Accepted, Derick Anderson
  - Re: (clarification) GET and POST Methods Accepted, Chris Shiflett
    - Re: (clarification) GET and POST Methods Accepted, Greg Skouby
XSS & SQL injection "determining false positives", mike king
myspace hack, Akash
- Re: myspace hack, Stephen de Vries
- Re: myspace hack, Chris Varenhorst
  - Re: myspace hack, Chris Varenhorst
- RE: myspace hack, Griffiths, Ian
  - Re: myspace hack, rSYN
- RE: myspace hack, Reynolds, Jake
  - Re: myspace hack, Stephen de Vries
  - RE: myspace hack, Radoslav Vasilev
  - RE: myspace hack, Andrew Chong
    - Re: myspace hack, Stephen de Vries
  - Re: myspace hack, Tim Brown
    - Re: myspace hack, bugtraq
    - Re: myspace hack, Tom Gallagher
    - Re: myspace hack, Disco Jonny
- RE: myspace hack, Jeff Robertson
  - RE: myspace hack, Richard M. Smith
- RE: myspace hack, Reynolds, Jake
- RE: myspace hack, Jeff Robertson
  - Re: myspace hack, bugtraq
  - Re: myspace hack (readable javascript code ), A. Fontes
  - Re: myspace hack (History of XSS), Jeremiah Grossman
- RE: myspace hack, Evans, Arian
honeypot and honeynet as IDS, Krish Mehak
GET and POST Methods Accepted, Welsh, Ed
- Re: GET and POST Methods Accepted, Joe Teff
- Re: GET and POST Methods Accepted, christopher baus
  - Re: GET and POST Methods Accepted, Stephen de Vries
    - Re: GET and POST Methods Accepted, christopher baus
- Re: GET and POST Methods Accepted, Damien Watson
- Re: GET and POST Methods Accepted, Serg Belokamen
- Re: GET and POST Methods Accepted, Eoin Keary
- Re: GET and POST Methods Accepted, Amit Klein (AKsecurity)
- Re: GET and POST Methods Accepted, John GALLET
  - Re: GET and POST Methods Accepted, Eoin Keary
    - Re: GET and POST Methods Accepted, John GALLET
- Re: GET and POST Methods Accepted, Paul Laudanski
- RE: GET and POST Methods Accepted, Derick Anderson
  - RE: GET and POST Methods Accepted, christopher baus
    - RE: GET and POST Methods Accepted, Joe Teff
- RE: GET and POST Methods Accepted, Derick Anderson
Administrivia: CISSP thread, Andrew van der Stock
mod_ibm_ssl & mod_ssl, jipi dini
- Re: mod_ibm_ssl & mod_ssl, Esteban Martinez Fayo
Web Application for project, f_kenisky
- Re: Web Application for project, Mark Ryan del Moral Talabis
- Re: Web Application for project, lakewood1@xxxxxxxxxx
- Re: Web Application for project, f_kenisky
Cenzic NASL plugins, sec stuff
- Re: Cenzic NASL plugins, Michael Boman
FW: [SC-L] Build Security In, Sebastien Deleersnyder
User verification questions, Derick Anderson
- Re: User verification questions, Andrew van der Stock
  - Re: User verification questions, Mark Jeftovic
  - Re: User verification questions, Yousef Syed
- Re: User verification questions, John Manko
- RE: User verification questions, Derick Anderson
- RE: User verification questions, Auri Rahimzadeh
- RE: User verification questions, Derick Anderson
  - Re: User verification questions, bryan allott
    - RE: User verification questions, Auri Rahimzadeh
- RE: User verification questions, Auri Rahimzadeh
- RE: User verification questions, Derick Anderson
  - Re: User verification questions, Gary Gwin
Re: OWASP Top 10 Demonstration CodeLooking for pen test open source tools, mike03051
- Re: OWASP Top 10 Demonstration CodeLooking for pen test open source tools, Stephen de Vries
- RE: OWASP Top 10 Demonstration CodeLooking for pen test open source tools, Sebastien Deleersnyder
Announcement: The Web Application Firewall Evaluation Criteria v1, contact
CLR Stored Procedures, nitin patel
- Re: CLR Stored Procedures, bryan allott
Ecyware GreenBlue Inspector (freeware), Rogelio Morrell C.
Paros 3.2.6 release - security fix, contact
OWASP Top 10 Demonstration Code, Brokken, Allen P.
Fw: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers, Jeff Williams
(Quite a few!) volunteers needed for Turkish translation of OWASP Guide v2.0, burgun
- Re: (Quite a few!) volunteers needed for Turkish translation of OWASP Guide v2.0, Patrick Nelson
- Re: (Quite a few!) volunteers needed for Turkish translation of OWASP Guide v2.0, kerem . kusmezer
[ANNOUNCE] ModSecurity 1.9RC1 has been released, Ivan Ristic
WASC Threat Classification in 4 languages, contact
What are we trying to "Benchmark" anyway? Report color, length, number of red exclamation points...., Evans, Arian
- Re: What are we trying to "Benchmark" anyway? Report color, length, number of red exclamation points...., Eoin Keary
- RE: What are we trying to "Benchmark" anyway? Report color, length, number of red exclamation points...., Evans, Arian
Good benchmark application for web security testing tools?, Peine,Holger
- Re: Good benchmark application for web security testing tools?, Eoin Keary
- RE: Good benchmark application for web security testing tools?, Benjamin Livshits
- RE: Good benchmark application for web security testing tools?, Steven Rebello
- RE: Good benchmark application for web security testing tools?, Evans, Arian
- RE: Good benchmark application for web security testing tools?, Lodin, Steven
- RE: Good benchmark application for web security testing tools?, Ofer Shezaf
- RE: Good benchmark application for web security testing tools?, Mark Curphey
- RE: Good benchmark application for web security testing tools?, Evans, Arian
- RE: Good benchmark application for web security testing tools?, Mark Curphey
OWASP Events in October, Andrew van der Stock
Re: NTLM and man-in-the-middle proxies not working, raymond_b_jimenez
- Re: NTLM and man-in-the-middle proxies not working, Amit Klein (AKsecurity)
Paros 3.2.5 release - re-post, contact
Notes from CISSP class with Dr. Eric Cole, Saqib Ali
- Re: Notes from CISSP class with Dr. Eric Cole, Garth Somerville
  - Re: Notes from CISSP class with Dr. Eric Cole, Saqib Ali
    - RE: Notes from CISSP class with Dr. Eric Cole, Lyal Collins
- RE: Notes from CISSP class with Dr. Eric Cole, Harley David
  - RE: Notes from CISSP class with Dr. Eric Cole, Lyal Collins
- RE: Notes from CISSP class with Dr. Eric Cole, Harley David
  - RE: Notes from CISSP class with Dr. Eric Cole, Lyal Collins
    - RE: Notes from CISSP class with Dr. Eric Cole, Michael Krzeszkowski
- Re: Notes from CISSP class with Dr. Eric Cole, danew123
  - Re: Notes from CISSP class with Dr. Eric Cole, Eoin Keary
- Re: Notes from CISSP class with Dr. Eric Cole, dreamwvr
- Re: Re: Notes from CISSP class with Dr. Eric Cole, f_kenisky
- Re: RE: Notes from CISSP class with Dr. Eric Cole, f_kenisky
- RE: RE: Notes from CISSP class with Dr. Eric Cole, Craig Wright
- RE: Notes from CISSP class with Dr. Eric Cole, PPowenski
  - Re: Notes from CISSP class with Dr. Eric Cole, intel96
    - Re: Notes from CISSP class with Dr. Eric Cole, Saqib Ali
    - Re: Notes from CISSP class with Dr. Eric Cole, intel96
    - Re: Notes from CISSP class with Dr. Eric Cole, kgp
    - RE: Notes from CISSP class with Dr. Eric Cole, Mark Roxberry
- Re: RE: RE: Notes from CISSP class with Dr. Eric Cole, f_kenisky
- Re: Re: Notes from CISSP class with Dr. Eric Cole, f_kenisky
- Re: Notes from CISSP class with Dr. Eric Cole, dreamwvr
- RE: Notes from CISSP class with Dr. Eric Cole, Harley David
Re: SAS 70 and software policies, jcglover
- RE: SAS 70 and software policies, Rosado, Rafael (Rafael)
Paros 3.2.5 release, contact
Re: Must we authenticate login forms (using SSL?)?, Antoine Martin
- Re: Must we authenticate login forms (using SSL?)?, Amir Herzberg