[ad] WebScarab is a framework for analysing applications that communicate using the HTTP and HTTPS protocols. It is written in Java, and is thus portable to many platforms. WebScarab has several modes of operation, implemented by a number of plugins. In its most common usage, WebScarab operates as an intercepting proxy, allowing the operator to […]
web-application-security
Web Services Attack Frequency Increasing
[ad] As we’ve reported a few times recently, more and more attacks being aimed at Web Services such as Orkut, MySpace, Ebay and others. As more people turn to web applications for everyday tasks like e-mail, friendship and payments, cyber criminals are following them in search of bank account details and other valuable data, security […]
Oedipus – Open Source Web Application Security Analysis
[ad] Oedipus is an open source web application security analysis and testing suite written in Ruby by Penetration Testers for Penetration Testers. It is capable of parsing different types of log files off-line and identifying security vulnerabilities. Using the analyzed information, Oedipus can dynamically test web sites for application and web server vulnerabilities. Oedipus can […]
Academic Papers on Web Application Security
[ad] I found a useful resource containing a whole list of academic papers on web-application security. This list represents an attempt to collect academic papers on the subject of Web application security sorted by the year of publication. Hacking web applications has become a big thing in the last 5 years, just look at the […]
Security Researchers Afraid to Reveal Vulnerabilities
[ad] Well it happened a while back, remember? The French researcher Guillaume Tena who got in trouble for breaching French copywrite laws by decompiling some software. Now people are generally starting to worry about disclosing vulnerabilities through any channels, does there need to be some kind of anonymous PGP key based system for vulnerability disclosure? […]