security.websecurity (thread)

Good Magazines and Books, KT
HTTP validation framework for Java, Stephen de Vries
OWASP Top 10 2007 Release Candidate 1, Andrew van der Stock
Defeating CAPTCHAs via Averaging (fwd), bugtraq
Suggestions for the CSRF FAQ, Brian Eaton
- Re: Suggestions for the CSRF FAQ, bugtraq
  - Re: Suggestions for the CSRF FAQ, Brian Eaton
    - Re: Re: Suggestions for the CSRF FAQ, bugtraq
- Re: Suggestions for the CSRF FAQ, Stefan Esser
  - Re: Suggestions for the CSRF FAQ, Brian Eaton
  - Re: Suggestions for the CSRF FAQ, John Terrill
    - Re: Suggestions for the CSRF FAQ, Stefan Esser
WEB2.0 Security Isuues, Avi Shvartz
Re: How extract URL-link from flash(.swf) file by PHP?, Steve Orrin
How extract URL-link from flash(.swf) file by PHP?, 김영일
- Re: How extract URL-link from flash(.swf) file by PHP?, homegrown
  - Re: How extract URL-link from flash(.swf) file by PHP?, Korhan GURLER
Re: [Webappsec] [WEB SECURITY] xss filter to protect from xss attacks, anurag . agarwal
Re: [Webappsec] xss filter to protect from xss attacks, anurag . agarwal
- Re: [Webappsec] xss filter to protect from xss attacks, Stephen de Vries
- Re: [Webappsec] xss filter to protect from xss attacks, celf
- Re: [Webappsec] xss filter to protect from xss attacks, anurag . agarwal
- Re: Re: [Webappsec] xss filter to protect from xss attacks, Anurag Agarwal
  - Re: Re: [Webappsec] xss filter to protect from xss attacks, Prasad Shenoy
xss filter to protect from xss attacks, Anurag Agarwal
- Re: [Webappsec] xss filter to protect from xss attacks, Amit Klein
  - Re: Re: [Webappsec] xss filter to protect from xss attacks, Ryan Barnett
- Re: xss filter to protect from xss attacks, Prasad Shenoy
- Re: xss filter to protect from xss attacks, Dinis Cruz
  - Re: xss filter to protect from xss attacks, Andrew van der Stock
    - Re: xss filter to protect from xss attacks, pdp (architect)
- Re: xss filter to protect from xss attacks, Lalit Patel
- Re: xss filter to protect from xss attacks, anurag . agarwal
  - Re: [Webappsec] [WEB SECURITY] xss filter to protect from xss attacks, celf
WASC-Articles: Seeking Guest Writers, robert
Check Point Connectra End Point security bypass, Roni Bachar
- Re: Check Point Connectra End Point security bypass, Felix Lindner
What happens to Your Computer if you Mispell Google.com, pdp (architect)
- Re: What happens to Your Computer if you MispellGoogle.com, Nikolay Kichukov
Hardware for logging network requests, J Joensuu
- RE: [SPAM] [WEB SECURITY] Hardware for logging network requests, Steve Figures
- Re: Hardware for logging network requests, Mike Fratto
Atom Database, pdp (architect)
Crawling Ajax-driven Web 2.0 Applications, bugtraq
some answered questions, Jeremiah Grossman
- RE: some answered questions, Schmidt, Albert E
- RE: some answered questions, Chris Weber
Re: *RESULTS* Web Application Security Professionals Survey (Jan. 2007), Jeremiah Grossman
Persistent Web Backdoor, pdp (architect)
VisaNet Consolidated PIN Security Standards Requirements manual, Mustafa KOMUT
Ajax Sniffer - Proof of concept, Anurag Agarwal
Announcement: The Cross-site Request Forgery FAQ, bugtraq
- Re: Announcement: The Cross-site Request Forgery FAQ, James Landis
  - Re: Announcement: The Cross-site Request Forgery FAQ, bugtraq
- Re: Announcement: The Cross-site Request Forgery FAQ, Stefan Esser
  - Re: Announcement: The Cross-site Request Forgery FAQ, bugtraq
    - Re: Announcement: The Cross-site Request Forgery FAQ, Stefan Esser
- RE: Announcement: The Cross-site Request Forgery FAQ, Billy Hoffman
  - Re: Announcement: The Cross-site Request Forgery FAQ, bugtraq
- RE: Announcement: The Cross-site Request Forgery FAQ, John Terrill
Call for Participation - WASC Distributed Open Proxy Honeypot Project, Ryan Barnett
Client-side validation in 2007?, Kurt Grutzmacher
- Re: Client-side validation in 2007?, Jeremiah Grossman
- RE: Client-side validation in 2007?, Martin O'Neal
- Re: Client-side validation in 2007?, Dennis Groves
Anti-DNS Pinning + Socket in FLASH, Kanatoko
Your free MacWorld Platinum Pass! Some hacking required., Kurt Grutzmacher
WASC Meetup at RSA (San Francisco 2007), Jeremiah Grossman
- Re: *REMINDER* WASC Meetup at RSA (San Francisco 2007), Jeremiah Grossman
iPhone, Dennis Groves
A Different CSOonline Article calling out the BS in the security industry, robert
- Re: A Different CSOonline Article calling out the BS in the security industry, Gervase Markham
  - Re: A Different CSOonline Article calling out the BS in the security industry, Dennis Groves
    - Re: A Different CSOonline Article calling out the BS in the security industry, robert
    - Re: A Different CSOonline Article calling out the BS in the security industry, Pete Herzog
    - Re: A Different CSOonline Article calling out the BS in the security industry, Andy Steingruebl
    - Re: A Different CSOonline Article calling out the BS in the security industry, Dennis Groves
    - Re: A Different CSOonline Article calling out the BS in the security industry, Pete Herzog
Article: A Positive Impact on Web Application Security (About WASC), robert
Disclosure for Web Applications, Jeremiah Grossman
- Decoding the Google Blacklist, Michael Sutton
- RE: Disclosure for Web Applications, txs
  - Re: Disclosure for Web Applications, Dennis Groves
    - RE: Disclosure for Web Applications, txs
    - Re: Disclosure for Web Applications, Dennis Groves
- RE: Disclosure for Web Applications, Bill Newton
  - Re: Disclosure for Web Applications, Pete Herzog
Automated Scanner vs. The OWASP Top Ten (white paper), Jeremiah Grossman
Administrative: List Questionnaire, robert
Re: recognising metacharacters as code ( Is ^ a dangerous metachar?), Brian Eaton
ACL for application, Ankur Jindal
- Re: ACL for application, Mr Zebedee
- RE: ACL for application, Herbener, Martin - KETS Engineering and Management
- Re: ACL for application, Brian Eaton
  - Re: ACL for application, Ankur Jindal
    - Re: ACL for application, Brian Eaton
    - Re: ACL for application, Ankur Jindal
- Re: ACL for application, valkyrie
Using .htaccess to protect from XSS attacks, Anurag Agarwal
- Re: Using .htaccess to protect from XSS attacks, RSnake
Web Application Security Professionals Survey (Jan. 2007), Jeremiah Grossman
- *RESULTS* Web Application Security Professionals Survey (Jan. 2007), Jeremiah Grossman
RE: [WEB SECURITY] Universal XSS with PDF files: highly dangerous, Martin O'Neal
Is ^ a dangerous metachar?, Ephraim Dan
- Re: Is ^ a dangerous metachar?, Haroon Meer
  - Re: Is ^ a dangerous metachar?, Brian Eaton
Looking For a Username Dictionary, Jason Wood
- Re: Looking For a Username Dictionary, H. Morrow Long
- RE: Looking For a Username Dictionary, Mark Mcdonald
QASEC Announcement: Writing Software Security Test Cases, bugtraq
- RE: QASEC Announcement: Writing Software Security Test Cases, Brian Cohen
- Re: QASEC Announcement: Writing Software Security Test Cases, Stephen de Vries
Server Obligation for Client Vulnerabilities (was: Universal XSS with PDF files: highly dangerous), Neil Smithline
- Re: Server Obligation for Client Vulnerabilities (was: Universal XSS with PDF files: highly dangerous), James Landis
Fwd: Re: Universal XSS with PDF files: highly dangerous, Tõnu Samuel
A Tour of the Google Blacklist, Michael Sutton
Universal PDF XSS After Party, pdp (architect)
- Re: Universal PDF XSS After Party(posible solution), Noe Espinoza M.
  - Re: Universal PDF XSS After Party(posible solution), Darren Bounds
  - Re: [WEB SECURITY] RE: Universal PDF XSS After Party(posible solution), RSnake
- Re: Universal PDF XSS After Party, Maik Mueller
Adobe Acrobat Reader Plugin - Multiple Vulnerabilities, Stefano Di Paola
Hacking AJAX DWR Applications, Amichai Shulman
Universal XSS with PDF files: highly dangerous, pdp (architect)
- Re: Universal XSS with PDF files: highly dangerous, Amit Klein
  - Re: Universal XSS with PDF files: highly dangerous, Richard Moore
    - Re: Universal XSS with PDF files: highly dangerous, Prasad Shenoy
    - Re: Universal XSS with PDF files: highly dangerous, Prasad Shenoy
  - Re: Universal XSS with PDF files: highly dangerous, Amit Klein
    - Re: Universal XSS with PDF files: highly dangerous, James Landis
    - Re: Universal XSS with PDF files: highly dangerous, pdp (architect)
    - Re: Universal XSS with PDF files: highly dangerous, RSnake
    - Re: Universal XSS with PDF files: highly dangerous, James Landis
    - Re: Universal XSS with PDF files: highly dangerous, Dave Ferguson
    - Re: Universal XSS with PDF files: highly dangerous, Prasad Shenoy
    - Re: Universal XSS with PDF files: highly dangerous, Amit Klein
    - Re: Universal XSS with PDF files: highly dangerous, James Landis
    - Re: Universal XSS with PDF files: highly dangerous, Amit Klein
    - Re: Universal XSS with PDF files: highly dangerous, James Landis
    - Re: Universal XSS with PDF files: highly dangerous, Amit Klein
    - Re: Universal XSS with PDF files: highly dangerous, James Landis
    - Re: Universal XSS with PDF files: highly dangerous, Amit Klein
    - Re: Universal XSS with PDF files: highly dangerous, pdp (architect)
    - Re: Universal XSS with PDF files: highly dangerous, Amit Klein
    - Re: Universal XSS with PDF files: highly dangerous, pdp (architect)
    - Re: Universal XSS with PDF files: highly dangerous, bugtraq
    - RE: Universal XSS with PDF files: highly dangerous, Martin O'Neal
    - RE: [WEB SECURITY] Universal XSS with PDF files: highly dangerous, Martin O'Neal
    - Re: Universal XSS with PDF files: highly dangerous, Amit Klein
    - RE: Universal XSS with PDF files: highly dangerous, Billy Hoffman
    - Re: Universal XSS with PDF files: highly dangerous, pst
    - Re: Universal XSS with PDF files: highly dangerous, Amit Klein
    - RE: Universal XSS with PDF files: highly dangerous, Guy Podjarny
    - Re: Universal XSS with PDF files: highly dangerous, Amit Klein
    - Re: Universal XSS with PDF files: highly dangerous, James Landis
    - Re: Universal XSS with PDF files: highly dangerous, Amit Klein
    - Re: Universal XSS with PDF files: highly dangerous, RSnake
    - Re: Universal XSS with PDF files: highly dangerous, Amit Klein
    - Re: Universal XSS with PDF files: highly dangerous, Neil Smithline
    - Re: Universal XSS with PDF files: highly dangerous, RSnake
    - Re: Universal XSS with PDF files: highly dangerous, Amit Klein
    - Re: Universal XSS with PDF files: highly dangerous, Brian Eaton
    - RE: [WEB SECURITY] Universal XSS with PDF files: highly dangerous, Marvin Simkin
    - RE: Universal XSS with PDF files: highly dangerous, Tom Spector
- Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous, sven . vetsch
  - Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous, pdp (architect)
  - Re: Universal XSS with PDF files: highly dangerous, ascii
  - Re: Universal XSS with PDF files: highly dangerous, ascii
  - Re: Universal XSS with PDF files: highly dangerous, ascii
  - Re: Universal XSS with PDF files: highly dangerous, Thierry Zoller
- Re: Universal XSS with PDF files: highly dangerous, Jean-Jacques Halans
  - Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous, Larry Seltzer
  - Re: Universal XSS with PDF files: highly dangerous, Jim Manico
    - Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous, RSnake
    - Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous, M . B . Jr .
    - Re: [Full-disclosure] [WEB SECURITY] Universal XSS with PDF files: highly dangerous, Jim Manico
- Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous, HASEGAWA Yosuke
- Re: Universal XSS with PDF files: highly dangerous, Kristina Lein
  - Re: Universal XSS with PDF files: highly dangerous, pdp (architect)
  - Re: Universal XSS with PDF files: highly dangerous, Stefano Di Paola
- Re: Universal XSS with PDF files: highly dangerous, The Anarcat
- Re: Universal XSS with PDF files: highly dangerous, der wert
  - Re: Universal XSS with PDF files: highly dangerous, pdp (architect)
    - Re: Universal XSS with PDF files: highly dangerous, skarvin
    - RE: Universal XSS with PDF files: highly dangerous, Billy Hoffman
    - RE: Universal XSS with PDF files: highly dangerous, RSnake
    - RE: Universal XSS with PDF files: highly dangerous, Martin O'Neal
    - Re: Universal XSS with PDF files: highly dangerous, skarvin
    - RE: [WEB SECURITY] Universal XSS with PDF files: highly dangerous, Martin O'Neal
  - RE: Universal XSS with PDF files: highly dangerous, Michael Sutton
- Re: Universal XSS with PDF files: highly dangerous, Juha-Matti Laurio
  - Re: Universal XSS with PDF files: highly dangerous, Larry Seltzer
    - Re: [WEB SECURITY]RE: Universal XSS with PDF files: highly dangerous, RSnake
- Re: Universal XSS with PDF files: highly dangerous, Juha-Matti Laurio
  - Re: Universal XSS with PDF files: highly dangerous, T Biehn
    - Re: [Full-disclosure] Universal XSS with PDF files: highly dangerous, pdp (architect)
- Re: Universal XSS with PDF files: highly dangerous, pst
- RE: Universal XSS with PDF files: highly dangerous, Ory Segal
  - RE: Universal XSS with PDF files: highly dangerous, Billy Hoffman
    - Re: Universal XSS with PDF files: highly dangerous, pdp (architect)
    - Re: Universal XSS with PDF files: highly dangerous, Amit Klein
- RE: Universal XSS with PDF files: highly dangerous, White, Dain P
  - RE: Universal XSS with PDF files: highly dangerous, Mark Andrews
  - RE: Universal XSS with PDF files: highly dangerous, RSnake
    - Re: Universal XSS with PDF files: highly dangerous, Jean-Jacques Halans
- Re: Universal XSS with PDF files: highly dangerous, Mike Metzger
  - Re: Universal XSS with PDF files: highly dangerous, Mike Metzger
    - Re: Universal XSS with PDF files: highly dangerous, Mike Metzger
- RE: Universal XSS with PDF files: highly dangerous, White, Dain P
- RE: Universal XSS with PDF files: highly dangerous, White, Dain P
- RE: Universal XSS with PDF files: highly dangerous, White, Dain P
  - Re: Universal XSS with PDF files: highly dangerous, Jean-Jacques Halans
- RE: Universal XSS with PDF files: highly dangerous, Martin O'Neal
- Re: Universal XSS with PDF files: highly dangerous, Jeff Williams
- RE: Universal XSS with PDF files: highly dangerous, Tom Stripling
Sniffing and Backdooring UIML Applications, bugtraq
Google’s blacklisted url database (phishing url database), Rajesh Sethumadhavan
- RE: Google's blacklisted url database (phishing url database), Brad Inscoe
img src , cant get it!, Esteban Ribičić
- RE: img src , cant get it!, White, Dain P
- img src , cant get it!, John Terrill
  - Re: img src , cant get it!, Benjamin Flesch
- RE: img src , cant get it!, steve jensen
Vulnerability Scanners Review Published, bugtraq
[NGSEC] ngGame #3 - BrainStorming (fwd), bugtraq
Fierce domain scan released, RSnake