News

It seems a lot of people is looking for the paper and CCC website is slow and discontinuous,
so anyone can download Subverting Ajax in the Papers Section.

Wisec@23rd. CCC Congress
Me (Stefano Di Paola) and Giorgio Fedon will have a lecture @ 23rd CCC Congress in Berlin on 29th December 2006 h. 17.15

Subverting Ajax - Next generation vulnerabilities in 2.0 Web Applications.

Topics will be:

• Prototype Hijacking
• Cross Domain Auto Injection
• Browser's Plugin Vulnerabilities

Mysql COM_TABLE_DUMP Flaws.

Mysql Anonymous login Flaw.

MySQL insecure temporary File Creation

PHP shmop safemode bypass

Php Vulnerability RFC1867 - POC

Wisec is brought to you by...

Wisec is written and mantained by Stefano Di Paola.

Wisec uses open standards, including XHTML, CSS2, and XML-RPC.