jetlib.sec » Tags » web-apps

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

10 items tagged "web apps"

Related tags: web [+], siddharth tags [+], searle [+], oracle [+], kevin johnson frank dimaggio [+], justin searle [+], injectable [+], hacking [+], exploits [+], dimaggio [+], video [+], shells [+], security pros [+], clickjacking [+], audio [+], attack web [+], apple [+], syhunt [+], steve jobs [+], slides [+], side [+], server side [+], new [+], native apps [+], native app [+], iphone [+], google [+], app [+]

• February 27, 2012
• 9:00

  Bugtraq: Syhunt: Google V8 - Server-Side JS Injection in vulnerable web apps

   » ‎ SecurityFocus Vulnerabilities
  Syhunt: Google V8 - Server-Side JS Injection in vulnerable web apps

  Tags:  google syhunt side web-apps server-side  

• September 29, 2011
• 7:19

  HTML 5 takes iPhone developer support full circle

   » ‎ Wirevolution

  Today Rethink Wireless reported that Facebook is moving towards HTML 5 in preference to native apps on phones.

  When the iPhone in arrived 2007, this was Steve Jobs’ preferred way to do third party applications:

  We have been trying to come up with a solution to expand the capabilities of the iPhone so developers can write great apps for it, but keep the iPhone secure. And we’ve come up with a very. Sweet. Solution. Let me tell you about it. An innovative new way to create applications for mobile devices… it’s all based on the fact that we have the full Safari engine in the iPhone. And so you can write amazing Web 2.0 and AJAX apps that look and behave exactly like apps on the iPhone, and these apps can integrate perfectly with iPhone services. They can make a call, check email, look up a location on Gmaps… don’t worry about distribution, just put ‘em on an internet server. They’re easy to update, just update it on your server. They’re secure, and they run securely sandboxed on the iPhone. And guess what, there’s no SDK you need! You’ve got everything you need if you can write modern web apps…

  But the platform and the developer community weren’t ready for it, so Apple was quickly forced to come up with an SDK for native apps, and the app store was born.

  So it seems that Apple was four years early on its iPhone developer solution, and that in bowing to public pressure in 2007 to deliver an SDK, it made a ton of money that it otherwise wouldn’t have:

  A web service which mirrors or enhances the experience of a downloaded app significantly weakens the control that a platform company like Apple has over its user base. This has already been seen in examples like the Financial Times newspaper’s HTML5 app, which has already outsold its former iOS native app, with no revenue cut going to Apple.

  Tags:  apple iphone app steve-jobs native-apps web-apps native-app apple  

• September 21, 2011
• 7:15

  Clickjacking For Shells

   » ‎ Packet Storm Security Recent Files
  Whitepaper called Clickjacking for Shells. Two years after the world was warned about clickjacking, popular web apps are still vulnerable and no web app exploits have been published. With many security pros considering clickjacking to have mere nuisance value on social networks, the attack is grossly underestimated. In this presentation, the author demonstrates step by step how to identify vulnerable applications, how to write exploits that attack web apps and also how to protect against clickjacking.

  Tags:  shells web clickjacking web-apps attack-web security-pros  

• 7:15

  Clickjacking For Shells

   » ‎ Packet Storm Security Misc. Files
  Whitepaper called Clickjacking for Shells. Two years after the world was warned about clickjacking, popular web apps are still vulnerable and no web app exploits have been published. With many security pros considering clickjacking to have mere nuisance value on social networks, the attack is grossly underestimated. In this presentation, the author demonstrates step by step how to identify vulnerable applications, how to write exploits that attack web apps and also how to protect against clickjacking.

  Tags:  shells web clickjacking web-apps attack-web security-pros  

• March 25, 2011
• 22:25

  [Audio] Hacking Oracle From Web Apps

   » ‎ SecDocs
  Authors: Sumit Siddharth
  Tags: Oracle
  Event: DEFCON 18
  

  Tags:  audio oracle hacking siddharth-tags web-apps  

• 22:25

  [Slides] Hacking Oracle From Web Apps

   » ‎ SecDocs
  Authors: Sumit Siddharth
  Tags: Oracle
  Event: DEFCON 18
  

  Tags:  oracle hacking web siddharth-tags web-apps slides  

• 22:25

  [Video] Hacking Oracle From Web Apps

   » ‎ SecDocs
  Authors: Sumit Siddharth
  Tags: Oracle
  Event: DEFCON 18
  

  Tags:  video oracle hacking siddharth-tags web-apps  

• March 27, 2010
• 21:00

  [Video] Injectable Exploits: Two New Tools for Pwning Web Apps and Browsers

   » ‎ SecDocs
  Authors: Justin Searle Kevin Johnson Frank DiMaggio
  Tags: penetration testing exploiting browser
  Event: DEFCON 17
  

  Tags:  exploits video injectable kevin-johnson-frank-dimaggio justin-searle web-apps dimaggio searle  

• 21:00

  [Slides] Injectable Exploits: Two New Tools for Pwning Web Apps and Browsers

   » ‎ SecDocs
  Authors: Justin Searle Kevin Johnson Frank DiMaggio
  Tags: penetration testing exploiting browser
  Event: DEFCON 17
  

  Tags:  exploits new injectable kevin-johnson-frank-dimaggio justin-searle web-apps dimaggio searle  

• 21:00

  [Audio] Injectable Exploits: Two New Tools for Pwning Web Apps and Browsers

   » ‎ SecDocs
  Authors: Justin Searle Kevin Johnson Frank DiMaggio
  Tags: penetration testing exploiting browser
  Event: DEFCON 17
  

  Tags:  exploits audio injectable kevin-johnson-frank-dimaggio justin-searle web-apps dimaggio searle