-
Web Application Security Professionals Survey
The riffraff of the web application security space Jeremiah Grossman has polled a bunch of application security professionals and published the results on his site. "Two weeks ago I sent out an informal email survey to several dozen people I know in the web application security professional services business. People from large and small organizations…
-
Hacker Pumpkins
RSnake is having a hacker pumpkin carving contest. Check out the XSS'd tricked out carving 🙂 Article Link: http://ha.ckers.org/blog/20061016/hacker-pumpkin-carving-contest/
Favorite Links
- Security Templates (New)
- The Web Application Security Consortium
- QA Security
- The Web Security Mailing List
- Romain Gaucher’s Blog
- Jeremiah Grossman’s Blog
Popular Pages
WASC Threat Classification
- Abuse of Functionality
- Application Misconfiguration
- Brute Force Attack
- Content Spoofing
- Credential/Session Prediction
- Denial of Service
- Directory Indexing
- Information Leakage
- Remote File Inclusion Attack
- Routing Detour Attack
- SOAP Array Abuse
- XML Attribute Blowup
- XML Injection
- XML External Entity Attack