FULL-DISCLOSURE: Circarigel
Youtube Steet Team partners with
alt.sexual.abuse.recovery for great
vigilante internet justice
__
_ _ ___ _ _| |_ _ _| |__ ___
| || / _ \ || | _| || | '_ \/ -_)
\_, \___/\_,_|\__|\_,_|_.__/\___|
|__/
Very cool.
On 1/27/07 7:29 AM, "Michal Zalewski" <[EMAIL PROTECTED]> wrote:
> Hi all,
>
> I'd like to announce the availability of 'stompy', a free tool to perform
> a fairly detailed black-box assessment of WWW session identifier
> generation algorithms. Session IDs are commonly used to track
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200701-25
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
- --
Debian Security Advisory DSA 1253-1[EMAIL PROTECTED]
http://www.debian.org/security/ Martin Schulze
January 27th, 2006
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
- --
Debian Security Advisory DSA 1252-1[EMAIL PROTECTED]
http://www.debian.org/security/ Martin Schulze
January 27th, 2007
Hi all,
I'd like to announce the availability of 'stompy', a free tool to perform
a fairly detailed black-box assessment of WWW session identifier
generation algorithms. Session IDs are commonly used to track
authenticated users, and as such, whenever they're predictable or simply
vulnerable to br