[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-disclosure] Am I missing anything ?
- To: Deeþàn Chakravarthÿ <codeshepherd@xxxxxxxxx>, <websecurity@xxxxxxxxxxxxx>, <full-disclosure@xxxxxxxxxxxxxxxxx>
- Subject: Re: [Full-disclosure] Am I missing anything ?
- From: "J. Patterson Wicks" <pwicks@xxxxxxxxxx>
- Date: Mon, 23 Jul 2007 13:37:31 -0400
Canonicalization
Input Validation
Buffer Overflows (Stack Buffer Overflows - Heap/BSS/Data Overflows)
-----Original Message-----
From: full-disclosure-bounces@xxxxxxxxxxxxxxxxx
[mailto:full-disclosure-bounces@xxxxxxxxxxxxxxxxx] On Behalf Of Deeþàn
Chakravarthÿ
Sent: Monday, July 23, 2007 1:20 PM
To: websecurity@xxxxxxxxxxxxx; full-disclosure@xxxxxxxxxxxxxxxxx
Subject: [Full-disclosure] Am I missing anything ?
Hi All,
Just wondered if I am missing anything important. Am planning to give
talk on web security.
Is there any other technique other than the following I have to speak
about ?
1)XSS
2)CSRF
3)SQL Injection
4)AJAX/JSON hijacking
5)HTTP response splitting
6)RFI
7)CRLF
8)MITM
Thanks
Deepan
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/