security.websecurity (thread)

WHITE PAPER: For my next trick… hacking Web2.0, pdp (architect)
Further CSS Firefox demo, gaz_sec
- Re: Further CSS Firefox demo, Esam Gharish
  - Re: Further CSS Firefox demo, Joshua Ross
- Re: Further CSS Firefox demo, gaz_sec
  - Re: Further CSS Firefox demo, Esam Gharish
- Re: Further CSS Firefox demo, gaz_sec
firefox extension for looping through a form?, offset
- Re: firefox extension for looping through a form?, Deeþan Chakravarthy
Scanning internal Lan using PHP remote file opening., Stefano Di Paola
How to detect XSS in an automated fashion, Travis Altman
- Re: How to detect XSS in an automated fashion, gaz_sec
  - RE: How to detect XSS in an automated fashion, Billy Hoffman
    - Re: How to detect XSS in an automated fashion, Romain Gaucher
- RE: How to detect XSS in an automated fashion, gaz_sec
- RE: How to detect XSS in an automated fashion, gaz_sec
  - RE: How to detect XSS in an automated fashion, Billy Hoffman
    - Re: How to detect XSS in an automated fashion, James Landis
- RE: How to detect XSS in an automated fashion, gaz_sec
- Re: How to detect XSS in an automated fashion, gaz_sec
24th Chaos Communication Congress 2007: Call for Participation, fukami
HTTP Proxy for thick clients, Huan Chi
- Re: HTTP Proxy for thick clients, bugtraq
- Re: HTTP Proxy for thick clients, Jeffory Atkinson
- Re: HTTP Proxy for thick clients, Shreeraj Shah
- Re: HTTP Proxy for thick clients, Rogan Dawes
- RE: HTTP Proxy for thick clients, Ofer Shezaf
- Re: HTTP Proxy for thick clients, rajat swarup
firefox3 vuln by design?, bugtraq
- Re: firefox3 vuln by design?, Thomas Roessler
- Re: firefox3 vuln by design?, gaz_sec
Why JSON/JavaScript hijacking only works on Mozilla, Billy Hoffman
- Re: Why JSON/JavaScript hijacking only works on Mozilla, Daniel Veditz
  - Re: Why JSON/JavaScript hijacking only works on Mozilla, Daniel Veditz
  - RE: Why JSON/JavaScript hijacking only works on Mozilla, Billy Hoffman
    - Re: Why JSON/JavaScript hijacking only works on Mozilla, Daniel Veditz
WASC Announcement: 'Script Mapping Project' Call for Participants, announcements
Intrusion Detection with Heterogenous Sensors, Bjoern Weiland
Firefox CSS flaws, gaz_sec
- Re: Firefox CSS flaws, Brian Eaton
  - Re: Firefox CSS flaws, Michael Vergoz
    - Re: Firefox CSS flaws, Brian Eaton
- Re: Firefox CSS flaws, gaz_sec
Announcement: Releasing CORE GRASP for PHP. An open source, dynamic web application protection system., Ezequiel Gutesman
- Re: Announcement: Releasing CORE GRASP for PHP. An open source, dynamic web application protection system., Ezequiel Gutesman
  - CCWAPSS : a Comprehensive security scoring method, Frederic Charpentier
Cenzic sues SPI Dynamics over Fault Injection, robert
- Re: Cenzic sues SPI Dynamics over Fault Injection, Steve Orrin
  - Re: Cenzic sues SPI Dynamics over Fault Injection, James Landis
    - Re: Cenzic sues SPI Dynamics over Fault Injection, Mark Andrews
Know Your Enemy: Malicious Web Servers, Ryan Barnett
Another Oracle Forensics Paper..., David Litchfield
Re: SecNiche : Microsoft Internet Explorer Pop up Blocker Bypassing and Dos Vulner, security curmudgeon
- Re: SecNiche : Microsoft Internet Explorer Pop up Blocker Bypassing and Dos Vulner, Steven M. Christey
SecNiche : Microsoft Internet Explorer Pop up Blocker Bypassing and Dos Vulnerability, Aditya K Sood
- Re: SecNiche : Microsoft Internet Explorer Pop up Blocker Bypassing and Dos Vulnerability, Debasis Mohanty
  - Re: SecNiche : Microsoft Internet Explorer Pop up Blocker Bypassing and Dos Vulnerability, Aditya K Sood
    - Re: SecNiche : Microsoft Internet Explorer Pop up Blocker Bypassing and Dos Vulnerability, J. Oquendo
    - Re: SecNiche : Microsoft Internet Explorer Pop up Blocker Bypassing and Dos Vulnerability, Pranay Kanwar
    - Re: SecNiche : Microsoft Internet Explorer Pop up Blocker Bypassing and Dos Vulnerability, Steven M. Christey
    - Re: SecNiche : Microsoft Internet Explorer Pop up Blocker Bypassing and Dos Vulnerability, Pranay Kanwar
  - Re: [Full-disclosure] SecNiche : Microsoft Internet Explorer Pop up Blocker Bypassing and Dos Vulnerability, Aditya K Sood
- SecNiche : Microsoft Internet Explorer Pop up Blocker Bypassing and Dos Vulnerability, Aditya K Sood
WASC Announcement: 'WASSEC Project' Call for Participants, announcements
Did webapp developers learn from Samy worm?, Anurag Agarwal
SQL Injection, ORDER BY plus DROP TABLE, Harry Muchow
- Re: SQL Injection, ORDER BY plus DROP TABLE, Prasad Shenoy
- Re: SQL Injection, ORDER BY plus DROP TABLE, Ali Soylu
Facebook Homepage Source Code Probably Leaked, pdp (architect)
Rough Cut of To-Be-Published Ajax Security, Andre Gironda
- RE: Rough Cut of To-Be-Published Ajax Security, Billy Hoffman
  - Re: Rough Cut of To-Be-Published Ajax Security, Dean H. Saxe
    - RE: Rough Cut of To-Be-Published Ajax Security, Billy Hoffman
    - Re: Rough Cut of To-Be-Published Ajax Security, pdp (architect)
Seeking feedback on proposed security restriction in the browsers, Anurag Agarwal
- Re: Seeking feedback on proposed security restriction in the browsers, Amit Klein
  - Re: Seeking feedback on proposed security restriction in the browsers, Jeremiah Grossman
    - Re: Seeking feedback on proposed security restriction in the browsers, Amit Klein
    - Re: Seeking feedback on proposed security restriction in the browsers, Jeremiah Grossman
    - Re: [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers, Amit Klein
- Re: Seeking feedback on proposed security restriction in the browsers, Brian Eaton
- Re: Seeking feedback on proposed security restriction in the browsers, Ryan Barnett
  - Re: Seeking feedback on proposed security restriction in the browsers, Prasad Shenoy
    - Re: Seeking feedback on proposed security restriction in the browsers, Jeremiah Grossman
    - Re: Seeking feedback on proposed security restriction in the browsers, andre
  - RE: Seeking feedback on proposed security restriction in the browsers, Ory Segal
- Re: Seeking feedback on proposed security restriction in the browsers, pdp (architect)
  - Re: Seeking feedback on proposed security restriction in the browsers, Brian Eaton
    - Re: Seeking feedback on proposed security restriction in the browsers, Andy Steingruebl
- Re: [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers, Amit Klein
- Re: Seeking feedback on proposed security restriction in the browsers, anurag . agarwal
  - Re: Seeking feedback on proposed security restriction in the browsers, Amit Klein
  - Re: [WEB SECURITY] Seeking feedback on proposed security restriction in the browsers, Amit Klein
- Re: Seeking feedback on proposed security restriction in the browsers, anurag . agarwal
  - Re: Seeking feedback on proposed security restriction in the browsers, pdp (architect)
- Re: Seeking feedback on proposed security restriction in the browsers, anurag . agarwal
- Re: Seeking feedback on proposed security restriction in the browsers, anurag . agarwal
  - Re: Seeking feedback on proposed security restriction in the browsers, pdp (architect)
    - Re: Seeking feedback on proposed security restriction in the browsers, James Landis
- Re: Seeking feedback on proposed security restriction in the browsers, anurag . agarwal
  - Re: Seeking feedback on proposed security restriction in the browsers, Gervase Markham
New Oracle Forensics Paper, David Litchfield
BlackHat/Defcon 2007 Timing Stuff Released.., haroon
What do security researchers want in a security disclosure policy to reduce their liability?, Andy Steingruebl
- Re: What do security researchers want in a security disclosure policy to reduce their liability?, Bubba Gump
  - Re: What do security researchers want in a security disclosure policy to reduce their liability?, Mark Andrews
Design flaw in AS3 socket handling allows port probing, fukami
[Mlabs-SecNiche] Bug Wars : The Lost Matrix of Security Vectors, Aditya K Sood
- Re: [Mlabs-SecNiche] Bug Wars : The Lost Matrix of Security Vectors, Prasad Shenoy
MachineID fingerprinting, robert
- RE: MachineID fingerprinting, robert.purvis
  - Re: MachineID fingerprinting, robert
    - RE: MachineID fingerprinting, White, Dain P
    - Re: MachineID fingerprinting, Walt Williams
    - Re: MachineID fingerprinting, Esam Gharish
  - Re: MachineID fingerprinting, GadgetTrak
    - Re: MachineID fingerprinting, Brian Eaton
- RE: MachineID fingerprinting, Billy Hoffman
  - Re: MachineID fingerprinting, robert
    - RE: MachineID fingerprinting, Billy Hoffman
- Re: MachineID fingerprinting, robert
  - RE: MachineID fingerprinting, Mario Contestabile
- Re: MachineID fingerprinting, Daniel McLaughlin
  - Re: MachineID fingerprinting, robert
    - Re: MachineID fingerprinting, Brian Eaton
    - Re: MachineID fingerprinting, robert
    - Re: MachineID fingerprinting, Mike Fratto
    - Re: MachineID fingerprinting, Andy Steingruebl
- RE: MachineID fingerprinting, Glenn.Everhart
- RE: MachineID fingerprinting, Tom Stripling
Mozilla Releases JavaScript Fuzzer, bugtraq
Pictures from WASC/OWASP party in vegas, robert
Risk in Validating new password at client side, Appsec Punter
- RE: Risk in Validating new password at client side, White, Dain P
- Re: Risk in Validating new password at client side, Pranay Kanwar
  - Re: Risk in Validating new password at client side, Chris Varenhorst
    - RE: Risk in Validating new password at client side, Joe Yeager
Re: List slowdown during blackhat, robert
Re: False Positives with .NET's Request Validation?, Arian J. Evans
- RE: False Positives with .NET's Request Validation?, James Strassburg
Re: [WEB SECURITY] *****SPAM***** New Wordpress 2.2.1 Vulnerabilities and the First Weblog XSS Worm, neil-webappsec-org