Would > > someone educate me on why LH needs to talk to the web? Thanks. > > > > Lou Williams > > _______________________________________________

For the very first time nullcon now comes to Delhi - to showcase cutting edge security technologies and discuss latest security threats among the Corporate world and the Government sector. The event brings together thought leaders, Corporates, Government and security professionals all under one roof.

>>> >>> [0] https://www.owasp.org/index.php/DOM_Based_XSS >>> [1] https://dominator.mindedsecurity.com/ >>> -- >>> Taras >>> http://oxdef.info >>> GPG: C8D1F510 >>> >>> _______________________________________________ >>> The Web Security Mailing List >>> >>> WebSecurity RSS Feed >>> http://www.webappsec.org/rss/websecurity.rss >>> >>> Join WASC on LinkedIn >

In normal web app, this should work, not sure how successful it will be in web 2.0 based apps though. However, if this approach fails, then I think the challenge mainly is because of crawling. 2. In case of failure, I believe you might want to crawl the app efficiently first in order to ensure that you cover all URL's.

. >> But this really depends on the network speed, the load the workers >> create on the web application to crawl(in case its not just a simple >> html file based web site), the duration of a full crawl and the number >> of different paths in the application. >> >> Is there still something I missed or would one of 1,2,3 solve your >> problem?

Sooner or later, Edgardo's lab web page will be online for all to visit. I hope you will find it interesting. Thank you. Kind Regards, Edgardo Molina Dirección IPTEL www.iptel.net.mx T : 55 55 55202444 M : 04455 20501854 Piensa en Bits SA de CV Información anexa: CONFIDENCIALIDAD DE INFORMACION Este mensaje tiene carácter confidencial.

https://youtu.be/zSJfMxQsBUI Hi folks.. The video of the Tricolored Heron https://youtu.be/zSJfMxQsBUI Was made early this morning at the Leslie spit. The TRICOLORED HERON is still being viewed this evening, and for the weekend, it should stay at the Tommy Thompson Park.

Things the can be detected on the web-layer: SQL-injection, XSS and other vulnerabilities on the eb-layer. just my few cents -- Grisu

and use burp proxy. > > Have fun. > > > D > > --- On Thu, 5/24/12, Appsec User wrote: > >> From: Appsec User >> Subject: [WEB SECURITY] XSS filter Bypass >> To: websecurity@lists.webappsec.org >> Date: Thursday, May 24, 2012, 3:16 AM >> Hi, >> >> I am probing for XSS in an application.

Only echo() has that hack. What my point is that echo() can catch the argument name.