Colin ----- Original Message ----- From: sarvesh shete [mailto:sarvesh.sse@gmail.com] To: Christian Heinrich [mailto:christian.heinrich@cmlh.id.au] Cc: websecurity@lists.webappsec.org Sent: Fri, 24 May 2013 07:24:38 +0100 Subject: Re: [WEB SECURITY] [Web Security] Can a PADSS certified system be hacked > Thanx Maanav, Thanx Christian!

Hi all, In end of May in Moscow Russia finished Positive Hack Days 2012 forum (www.phdays.com<http://www.phdays.com>). There are was several interesting Web App Sec topics I want to share. You can find other slides here: http://phdays.blogspot.com/2012/06/presentations-from-positive-hack-days.html WEB SECURITY Report: Miroslav Štampar.

-- Regards, Christian Heinrich http://cmlh.id.au/contact

The Maine Bureau of Parks and Lands learned in February that their online system for the sale of state park passes, provided by a private vendor, was hacked by "malware." *Mass Attack: *No *Reference: * http://www.wabi.tv/news/18888/state-website-hacked-officials-say-1000-people-affected-have-been-notified *Attack Source Geography:*

To try to repeat the feats of the CTF battle participants and fight for the prizes provided by Positive Technologies, please register at the official web site http://www.phdays.com/ctf/king/ During the Capture The Flag hacking contest at PHDays 2012 twelve teams from ten countries have been attacking the networks of other teams and protecting their own networks

more ideas for hacking and secure development > > Thanks in Advance > > -- > Best Regards, > Mostafa Siraj <http://twitter.com/mostafasiraj> > > "Our deepest fear is not that we are inadequate.

> > > > -- > Regards, > Christian Heinrich > > http://cmlh.id.au/contact > _______________________________________________ > The Web Security Mailing List > > WebSecurity RSS Feed > http://www.webappsec.org/rss/websecurity.rss > > Join WASC on LinkedIn http://www.linkedin.com/e/gis/83336/4B20E4374DBA > > WASC on Twitter > http://twitter.com/wascupdates

>> >> >> >> -- >> Regards, >> Christian Heinrich >> >> http://cmlh.id.au/contact >> > > _______________________________________________ > The Web Security Mailing List > > WebSecurity RSS Feed > http://www.webappsec.org/rss/websecurity.rss > > Join WASC on LinkedIn http://www.linkedin.com/e/gis/83336/4B20E4374DBA > > WASC on Twitter > http://twitter.com/wascupdates

into Voice of America’s primary domain name (VOANews.com), and then redirected visitors to another web site claiming to be run by the "Iranian Cyber Army," Numerous related domains registered with Network Solutions were also hacked into, and web visitors were also redirected to the web site supposedly run by the “Iranian Cyber Army.”