2010
Web Application Exploits and Defenses
by 2 others (via)# Learn how hackers find security vulnerabilities!
# Learn how hackers exploit web applications!
# Learn how to stop them!
La sécurité du web passera-t-elle par vous ? : Ergonomie web, Ruby on Rails et Architecture de l'information
Un bon article de synthèse sur la sécurité des sites web.
2009
Main Page - OWASP
by 9 othersThe Open Web Application Security Project (OWASP) is a worldwide free and open community focused on improving the security of application software.
2008
ratproxy - Google Code
by 6 others (via)A semi-automated, largely passive web application security audit tool, optimized for an accurate and sensitive detection, and automatic annotation, of potential problems and security-relevant design patterns based on the observation of existing, user-initiated traffic in complex web 2.0 environments.
Finding SQL Injection with Scrawlr - The HP Security Laboratory
by 1 other (via)Scrawlr, developed by the HP Web Security Research Group in coordination with the MSRC, is short for SQL Injector and Crawler. Scrawlr will crawl a website while simultaneously analyzing the parameters of each individual web page for SQL Injection vulnerabilities.
Avis d’expert : GoolagScan, ange ou démon ? par Fabien Spagnolo – Tribune Solutions
Utilisé à mauvais escient, l'outil GoolagScan est particulièrement dangeureux... Mais utilisé par les administrateurs de sites Web, il peut devenir leur meilleur allié.
2007
Chapter 20: Security
(via)Le chapitre du Django Book sur la sécurité est sorti aujourd'hui et je pense que tous les développeurs web un peu consciencieux devraient aller le lire, c'est une bonne base.
Welcome to OpenID Enabled! — OpenID Enabled
by 6 others (via)From the developers of the Python-OpenID library and MyOpenID.com (where you can get an OpenID for free -- you can also choose from a number of other OpenID providers) this is a website by OpenID developers, for OpenID developers.
1
(8 marks)
