security.websecurity (thread)

XSS caused by Greasemonkey userscript, Martin Johns
ERRATA (Re: "Host header cannot be trusted as an anti anti DNS-pinning measure"), Amit Klein
- Re: ERRATA (Re: "Host header cannot be trusted as an anti anti DNS-pinning measure"), Martin Johns
Re: (somewhat) breaking the same-origin policy by undermining dns-pinning, Kanatoko
DNS-Pinning demo, Kanatoko
new backframe release, pdp (architect)
Congressional aide punk'd, then fired, bugtraq
Automated Privilege Escalation Testing in Web Applications - a whitepaper, Ory Segal
RE: Tools or software for hacking windows/iis., TUSHAR VARTAK /ISG/INFOTECH/BKC
The lack of security enabled frameworks is why we're vulnerable, bugtraq
- Re: The lack of security enabled frameworks is why we're vulnerable, Brian Eaton
  - Re: The lack of security enabled frameworks is why we're vulnerable, Jeff Robertson
- Re: The lack of security enabled frameworks is why we're vulnerable, Jeremiah Grossman
RE: Metasploit, Schmidt, Albert E
- RE: RE: Metasploit, Hayes, Bill
Cross domain access using JavaScript document.referrer, Kanatoko
- Re: Cross domain access using JavaScript document.referrer, Amit Klein
  - Re: Cross domain access using JavaScript document.referrer, Kanatoko
EV SSL certificates, Brian Eaton
- Tools or software for hacking windows/iis., Schmidt, Albert E
  - RE: Tools or software for hacking windows/iis., Will Jefferies
    - RE: Tools or software for hacking windows/iis., Sels, Roger
    - RE: Tools or software for hacking windows/iis., Hauser, Donald
    - RE: Tools or software for hacking windows/iis., Schmidt, Albert E
  - RE: Tools or software for hacking windows/iis., GeminiConsulting
    - RE: Tools or software for hacking windows/iis., Schmidt, Albert E
  - RE: Tools or software for hacking windows/iis., Jarmon, Don R
    - RE: Tools or software for hacking windows/iis., Schmidt, Albert E
- Re: EV SSL certificates, bugtraq
- RE: EV SSL certificates, TUSHAR VARTAK /ISG/INFOTECH/BKC
  - Re: EV SSL certificates, Mike Fratto
comparing information security to other industries -, Albert
[WEB SECURITY] comparing information security to other industries, Albert
comparing information security to other industries, KT
- RE: comparing information security to other industries, Will Jefferies
- Re: comparing information security to other industries, Valdis . Kletnieks
  - Re: [Full-disclosure] comparing information security to other industries, coderman
    - Re: [WEB SECURITY] Re: comparing information security to other industries, Andre Gironda
    - Re: [Full-disclosure] [WEB SECURITY] Re: comparing information security to other industries, coderman
- Re: comparing information security to other industries, Nancy Kramer
- Re: [Full-disclosure] comparing information security to other industries, Nancy Kramer
- Re: [WEB SECURITY] comparing information security to other industries, Jason Muskat, GCFA, GCUX, de VE3TSJ
- Re: Re: [Full-disclosure] comparing information security to other industries, Dinis Cruz
- Re: comparing information security to other industries, Michael Zimmermann
  - Re: comparing information security to other industries, Brian Eaton
    - Re: comparing information security to other industries, Michael Zimmermann
IE7 Phishing Filter Tells Microsoft The URLS You Visit?, bugtraq
- RE: IE7 Phishing Filter Tells Microsoft The URLS You Visit?, Chris Weber
  - Re: IE7 Phishing Filter Tells Microsoft The URLS You Visit?, Shane Forsythe
    - Re[2]: IE7 Phishing Filter Tells Microsoft The URLS You Visit?, Thierry Zoller
- Re: IE7 Phishing Filter Tells Microsoft The URLS You Visit?, Jason Muskat, GCFA, GCUX, de VE3TSJ
PHP security under scrutiny, bugtraq
RE: Session hijacking via XSS vuln requring POST impossible?, Holger.Peine
Re: [WEB SECURITY] Session hijacking via XSS vuln requring POST impossible?, RSnake
Odysseus 2.0 / Telemachus 1.0 (Beta), Dave
Top 10 Web Hacks of 2006, Jeremiah Grossman
Backdooring Image Files - security notice, pdp (architect)
- Re: Backdooring Image Files - security notice, John GALLET
  - Re: Backdooring Image Files - security notice, ascii
    - Re: Backdooring Image Files - security notice, John GALLET
What problem have this Rijndael(.NET&PHP) code?, 김영일
- Re: What problem have this Rijndael(.NET&PHP) code?, Scott C. Sanchez
- Re: What problem have this Rijndael(.NET&PHP) code?, Peter Conrad
  - RE: What problem have this Rijndael(.NET&PHP) code?, Wall, Kevin
- Re: What problem have this Rijndael(.NET&PHP) code?, Jamie Riden
Certifications, Ankur Jindal
- Re: Certifications, A. Ramos
- RE: Certifications, TUSHAR VARTAK /ISG/INFOTECH/BKC
Application Security Predictions of 2007, bugtraq
JavaScript WebSite Login Checker, Jeremiah Grossman
- Re: EV SSL certificates, Michael Sutton
New two-stage login procedure, Gervase Markham
- Re: New two-stage login procedure, Brian Eaton
  - Re: New two-stage login procedure, Brian Eaton
    - Re: New two-stage login procedure, Esteban Ribičić
    - Re: New two-stage login procedure, Esteban Ribičić
    - Re: New two-stage login procedure, H. Morrow Long
    - Re: New two-stage login procedure, Brian Eaton
    - Re: New two-stage login procedure, Nick Owen
    - Re: New two-stage login procedure, Brian Eaton
    - Re: New two-stage login procedure, Esteban Ribičić
    - Re: New two-stage login procedure, nowen
    - RE: New two-stage login procedure, Henry Troup
    - Re: New two-stage login procedure, Nick Owen
    - Re: New two-stage login procedure, Brian Eaton
    - Re: New two-stage login procedure, Nick Owen
    - Re: New two-stage login procedure, Esteban Ribičić
    - RE: New two-stage login procedure, Billy Hoffman
    - RE: New two-stage login procedure, Wade Millican
    - Re: New two-stage login procedure, Gervase Markham
    - Re: off-topic New two-stage login procedure, Chip Mefford
  - Re: New two-stage login procedure, Theo Spears
- Re: New two-stage login procedure, Brian Eaton
- RE: New two-stage login procedure, Mark Mcdonald
  - RE: New two-stage login procedure, Wade Millican
    - RE: New two-stage login procedure, Martin O'Neal
    - Re: New two-stage login procedure, Gervase Markham
    - Re: New two-stage login procedure, James Landis
    - Re: New two-stage login procedure, Brian Eaton
    - Re: New two-stage login procedure, James Landis
    - Re: New two-stage login procedure, Brian Eaton
    - Re: New two-stage login procedure, Brian Eaton
  - Re: New two-stage login procedure, Gervase Markham
WASC Articles Project - Call for Participants, robert
WASC-Announcement: MX Injection - Capturing and Exploiting Hidden Mail Servers By Vicente Aguilera Diaz, robert
XSS worm attacking Google?, Billy Hoffman
- Re: XSS worm attacking Google?, pdp (architect)
  - Re: XSS worm attacking Google?, Kuai Hinojosa
    - RES: XSS worm attacking Google?, Denny Roger
Analysis, Source-code of the MySpace Quicktime worm, Billy Hoffman
- Re: Analysis, Source-code of the MySpace Quicktime worm, Steve Orrin
security of GUID, Noon Tar
- RE: security of GUID, Chris Weber
Middle tier application security, Ankur Jindal
New MySpace worm could be on its way, pdp (architect)
Web Application Security Professionals Survey (Dec. 2006), Jeremiah Grossman
- Re: *Results* Web Application Security Professionals Survey (Dec. 2006), Jeremiah Grossman
Web security courses, Lazaros Hoppas
- RE: Web security courses, Sebastien Deleersnyder
- Re: Web security courses, Vicente Aguilera
- Re: Web security courses, Dan Kuykendall
Re: MySpace XSS+Phishing attack using Movies, Jason Muskat, GCFA, GCUX, de VE3TSJ
Re: Vulnerability Scanning Web 2.0 Client-Side Components, Jason Muskat, GCFA, GCUX, de VE3TSJ
Re: standards for session tokens, Brian Eaton
PoC - ajax worm, Anurag Agarwal
- Re: PoC - ajax worm, Jason Muskat, GCFA, GCUX, de VE3TSJ
Microsoft Anti-Cross Site Scripting Library V1.5 is Released, Whelan. Andy \(Group IS Security\)
Re: XSS Question, pdp (architect)