security.websecurity (date)

March 31, 2007

Digg Delicious Technorati & Netscape XSS (worm?), mybeni websecurity
Re: [WEB SECURITY] Re: Global Space Exploitation In PHP Based Web Applications, Aditya K Sood
Re: [Full-disclosure] Global Space Exploitation In PHP Based Web Applications, Michal Zalewski
Re: [Webappsec] [WEB SECURITY] Preventing Cross-site Request Forgeries [ASP.NET crowd], Jim Manico
Re: [Webappsec] [WEB SECURITY] Preventing Cross-site Request Forgeries [ASP.NET crowd], pdp (architect)
Re: [Webappsec] [WEB SECURITY] Preventing Cross-site Request Forgeries [ASP.NET crowd], Jim Manico
Re: Preventing Cross-site Request Forgeries [ASP.NET crowd], pdp (architect)
Global Space Exploitation In PHP Based Web Applications, Aditya K Sood
Re: [WEB SECURITY] Preventing Cross-site Request Forgeries [ASP.NET crowd], Chris Weber
Re: Preventing Cross-site Request Forgeries [ASP.NET crowd], Arian J. Evans

March 30, 2007

RE: Preventing Cross-site Request Forgeries [ASP.NET crowd], Michael Sutton
RE: Preventing Cross-site Request Forgeries [ASP.NET crowd], Chris Weber
Reflection on Jeff Williams, anurag . agarwal
Preventing Cross-site Request Forgeries, pdp (architect)
Re: HTTP authentication without a 401 response?, Andy Steingruebl

March 29, 2007

Re: HTTP authentication without a 401 response?, Brian Eaton
HTTP authentication without a 401 response?, Marc-André Laverdière

March 26, 2007

Rootkit.com : Prone To Redirection and Looping Attacks, Aditya K Sood

March 25, 2007

Re: [Webappsec] Preventing HTTP Response Splitting with HTTP mods and sequence-id's ?, Andy Steingruebl
Re: Java 2 Security Standards, Brian Eaton
Re: Using XUL to spoof a firefox window, Michal Zalewski
RE: [Webappsec] Java 2 Security Standards, Jeff Williams

March 24, 2007

Using XUL to spoof a firefox window, bugtraq
Re: [Webappsec] Preventing HTTP Response Splitting with HTTP mods and sequence-id's ?, Amit Klein
Re: htaccess Protection - Apache, RSnake
Re: [Webappsec] Preventing HTTP Response Splitting with HTTP mods and sequence-id's ?, Andy Steingruebl
Re: RE: [Webappsec] Java 2 Security Standards, Stephen de Vries
Re: [Webappsec] Java 2 Security Standards, Daniel Fernández Garrido
RE: [Webappsec] Java 2 Security Standards, Larry Pingree

March 23, 2007

Re: [Webappsec] Java 2 Security Standards, Daniel Fernández Garrido
Java 2 Security Standards, Larry Pingree
Re: [Webappsec] Preventing HTTP Response Splitting with HTTP mods and sequence-id's ?, Amit Klein
Fix Update: Disable Google Desktop Link Integration with IE & FireFox, Debasis Mohanty
Reflection on robert auger, anurag . agarwal
End Points Malfeasance, Aditya K Sood
Preventing HTTP Response Splitting with HTTP mods and sequence-id's ?, Andy Steingruebl
Malicioius JavaScript - AV Signatures, James Kist

March 22, 2007

IntraProgrammed Search Engines Are XSS Driven, Aditya K Sood

March 21, 2007

Re: [Web Security] Double Trap XSS Injections., Aditya K Sood
Re: [Web Security] Double Trap XSS Injections., Michal Zalewski
ZombieMap - GEO Zombie Mapper, pdp (architect)
[Web Security] Double Trap XSS Injections., Aditya K Sood

March 20, 2007

Re: Training choice, Ryan Barnett
Re: Web Security Regression Testing, Ryan Barnett
Re: YNT: A Secure CMS?, Jim Morgan
Re: [Webappsec] Web Security Regression Testing, Stephen de Vries
Re: Web Security Regression Testing, bugtraq
Web Security Regression Testing, Andy Steingruebl

March 19, 2007

Re: Training choice, Steve Slater
Re: Training choice, Andrew van der Stock
Training choice, David Felio
Re: [WEB SECURITY] GMail Contact Information Disclosure PoC, Dror Shalev
ANNOUNCING: 6th OWASP AppSec Conference - May 15-17 2007 - Milan, Italy, Dave Wichers
Re: [WEB SECURITY] GMail Contact Information Disclosure PoC, chris

March 18, 2007

Web Security and Bookmarklet Exploits, pdp (architect)

March 17, 2007

Reflection on Billy Hoffman, anurag . agarwal

March 16, 2007

OWASP Spring of Code 2007, Dinis Cruz
Re: Security Scanner, Dinis Cruz

March 15, 2007

Re: Security Scanner, Arian J. Evans
Re: Security Scanner, Prasad Shenoy
Re: Security Scanner, Thiago Zaninotti
Re: htaccess Protection - Apache, Matthieu Estrade
RE: Security Scanner, TUSHAR VARTAK /ISG/INFOTECH/BKC
Re: Security Scanner, foo
htaccess Protection - Apache, Greenarrow 1

March 14, 2007

Re: Hack, pump and dump, John Terrill
Hack, pump and dump, James Kist
GMail Contact Information Disclosure PoC, beNi
Re: Security Scanner, Rodrigo Montoro (Sp0oKeR)
Re: Security Scanner, James Landis
Re: Security Scanner, Anurag Agarwal
Re: Security Scanner, Steve Orrin
Re: Security Scanner, bugtraq
Re: Security Scanner, naka

March 13, 2007

Security Scanner, Luis Masut

March 12, 2007

new AttackAPI, pdp (architect)

March 11, 2007

Re: [WEB SECURITY] Re: Good resources on Web 2.0, czino2
Re: Re: [Full-disclosure] Good resources on Web 2.0, bugtraq
WASC Threat Classification Project - Call for Participants, robert

March 09, 2007

Re: [WEB SECURITY] Re: Good resources on Web 2.0, Kasey Cross
This week : Reflection on Sheeraj Shah, Anurag Agarwal
Re: Re: [Full-disclosure] Good resources on Web 2.0, Dinis Cruz
Re: [Full-disclosure] Good resources on Web 2.0, crazy frog crazy frog
SyScan'07 - Call for Paper - NEW UPDATES, organiser@xxxxxxxxxx
Re: Good resources on Web 2.0, Michael Silk
Good resources on Web 2.0, Justin Boem

March 08, 2007

PHP import_request_variables() vs extract(), ascii
PHP import_request_variables() arbitrary variable overwrite, Stefano Di Paola
Re: Announcement: The Cross-site Request Forgery FAQ, James Landis

March 07, 2007

Re: Attack Tree, Ankur Jindal

March 06, 2007

Re: Attack Tree, Dinis Cruz
Re: Attack Tree, list
RE: Attack Tree, Chris Weber
Re: Attack Tree, Dinis Cruz
Re: Attack Tree, Ankur Jindal

March 05, 2007

Re: Attack Tree, Dinis Cruz
Re: Attack Tree, foo
Attack Tree, Ankur Jindal
RE: get ip with javascript, Danny Allan
RE: get ip with javascript, Martin O'Neal

March 04, 2007

Re: get ip with javascript, pdp (architect)
Re: get ip with javascript, Christopher Paggen
RE: get ip with javascript, Martin O'Neal
Re: get ip with javascript, Christopher Paggen
Re: Wordpress website hacked, wordpress backdoored, bugtraq
Re: Wordpress website hacked, wordpress backdoored, Dinis Cruz

March 03, 2007

Wordpress website hacked, wordpress backdoored, bugtraq
get ip with javascript, Luis Masut

March 02, 2007

RE: break java script, steve jensen
RE: sql error, steve jensen
Re: break java script, beNi
Re: Virtual PIN pad code samples, Mike Shema
sql error, Luis Masut
break java script, Luis Masut
Re: Virtual PIN pad code samples, John Terrill
Re: Virtual PIN pad code samples, Colin Watson
Re: Virtual PIN pad code samples, Walt Williams
Virtual PIN pad code samples, Greg Elkins
Reflection on Ivan Ristic, Anurag Agarwal
YNT: A Secure CMS?, mulker