Context Security » webappsec http://www.contextsecurity.com Bringing information security into context. Wed, 16 Jun 2010 18:18:03 +0000 http://wordpress.org/?v=2.9.2 en hourly 1 w3af Technical Segment on PaulDotCom Tonight http://www.contextsecurity.com/2009/03/12/w3af-technical-segment-on-pauldotcom-tonight/ http://www.contextsecurity.com/2009/03/12/w3af-technical-segment-on-pauldotcom-tonight/#comments Thu, 12 Mar 2009 18:55:15 +0000 seth http://www.contextsecurity.com/?p=90 Just wanted to let you all know that I will be a guest on the PaulDotcom Security Weekly podcast tonight.  I will be leading a technical segment on w3af, which is a very nifty free/open source tool for web application scanning/exploitation.  Should be loads of fun!

The live stream should go up around 1845 EDT with the show starting around 1900EDT.  Further details can be found here: http://pauldotcom.com/security-weekly/

Hope to see you there.

Seth Misenar

]]> http://www.contextsecurity.com/2009/03/12/w3af-technical-segment-on-pauldotcom-tonight/feed/ 2 SANS Protecting Your Web Apps http://www.contextsecurity.com/2009/03/10/sans-protecting-your-web-apps/ http://www.contextsecurity.com/2009/03/10/sans-protecting-your-web-apps/#comments Wed, 11 Mar 2009 00:53:13 +0000 seth http://www.contextsecurity.com/?p=85 SANS Protecting Your Web Apps: Two Big Mistakes and 12 Practical Tips to Avoid Them

Not sure when this was released, but I am sure that it was pretty recently.  From the title I wasn’t really expecting much, but was pleasantly surprised by the clarity with which the tips were explained.  Frank Kim and Ed Skoudis co-authored this pithy 6 page paper.

Here is the description from the SANS Reading Room:

Many web application vulnerabilities are a direct result of improper input validation and output filtering, which leads to numerous kinds of attacks, including cross-site scripting (XSS), SQL injection, command injection, buffer overflows and many others. This article describes some of the best defenses against such attacks, which every Web application developer should master.

This offering looks to be part of a new series from SANS entitled, Working Papers in Application Security. I am looking forward to future papers if they are written as lucidly as this one.

Good work, Frank and Ed.

Here is the link to get the document: http://www.sans.org/reading_room/application_security/protecting_web_apps.pdf

]]> http://www.contextsecurity.com/2009/03/10/sans-protecting-your-web-apps/feed/ 0 SANS Phoenix 2009 http://www.contextsecurity.com/2008/12/15/sans-phoenix-2009/ http://www.contextsecurity.com/2008/12/15/sans-phoenix-2009/#comments Tue, 16 Dec 2008 03:19:23 +0000 seth http://www.contextsecurity.com/?p=45 Seth Misenar will be teaching SANS 401: Security Essentials and 538: Web App Pen Testing Immersion at SANS Phoenix 2009.

SEC401: Security Essentials
3/23/2009-3/28/2009

SEC538: Web Application Pen Testing Immersion
3/29/2008-3/30/2009

]]> http://www.contextsecurity.com/2008/12/15/sans-phoenix-2009/feed/ 0 SANS Secure Europe 2009 – Amsterdam http://www.contextsecurity.com/2008/12/15/sans-secure-europe-2009-amsterdam/ http://www.contextsecurity.com/2008/12/15/sans-secure-europe-2009-amsterdam/#comments Mon, 15 Dec 2008 21:31:00 +0000 seth http://www.contextsecurity.com/?p=34 Seth Misenar will be teaching SANS 542: Web Application Penetration Testing at SANS Secure Europe 2009 – Amsterdam

SEC542: Web Application Penetration Testing
5/11/2009-5/16/2009

]]> http://www.contextsecurity.com/2008/12/15/sans-secure-europe-2009-amsterdam/feed/ 0