Home
16 items | 181 visits
Links that came up during Security Innovations training course and other research
Updated on 2008-07-23
Created on 2008-07-22
Category: Computers & Internet
URL:
-
Security Innovation - Application Security, Risk Assessment and Risk Mitigation
These are the guys teaching the courst on Defensive Web Programming
-
Parosproxy.org - Web Application Security
Paros is for people who need to evaluate the security of their web applications. Which is a proxy that allows you to intercept and modify all HTTP and HTTPS data for the purposes of testing.
-
Introducing the Anti-Cross Site Scripting Library - ASP.NET Forums
Asp.Net forum post announcing the Anti-Cross Site Scripting (XSS) library from Microsoft, with links to downloa.d and documentation
-
Cross-site scripting (XSS) attacks exploit vulnerabilities in Web-based applications that fail to properly validate and/or encode input that is embedded in response data. Malicious users can then inject client-side script into response data causing the unsuspecting user's browser to execute the script code. The script code will appear to have originated from a trusted-site and may be able to bypass browser protection mechanisms such as security zones.
-
-
OWASP Validation Project - OWASP
OWASP CSRF Guard - protects a web application from Cross-Site Request Forgery attacks through the use of a unique random request token...
-
Napkin - 0x90.org
This URL is blocked by the Xerox proxy... but it's the home of the napkin app shown during class on Tuesday.
-
Sha1, MD4, URL, Base64, Base85 and MD5 Decoder / Encoder
A web-based alternative to Napkin for encoding strings...
-
OWASP Encoding Project
The Reform library provides a solid set of functions for encoding output for the most common context targets in web applications (e.g. HTML, XML, JavaScript, etc). The library also takes a conservative view of what are allowable characters based on historical vulnerabilities, and current injection techniques.
-
Holodeck - Software Testing using Fault Injection - Security Innovation
Holodeck - allows you to simulate faults like out-of-memory, high latency, etc, and in geneal take full control over a simulated windows and .net API environment to test your applications.
-
Information Risk Management: Tools & Resources: Vulnerability Scanning Program
The vulnerability scanning program is an integral part of the information security risk assessment process. Scans are conducted against environmental components: servers (OS), databases, and web applications. Vulnerability scanning may be conducted from an internal or external location to identify weaknesses within the environment and mitigate against them before they can be exploited.
1 - 16 of 16
Showing 20▼ items per page
List Comments
(0)
List Info
Sponsored Links
Ads by Google