full-disclosure - Paper - Dissecting Java Server Faces for Penetration Testing

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Thu, 25 Aug 2011 22:14:21 -0400
From: SecNiche Security Labs <0kn0ck@...niche.org>
To: full-disclosure@...ts.grok.org.uk, websecurity@...appsec.org
Subject: Paper - Dissecting Java Server Faces for
	Penetration Testing

Hi

This paper sheds light on the .findings of security testing of Java
Server Faces. JSF has been widely used as an open source web framework
for developing efficient applications using J2EE. JSF is compared with
ASP.NET framework to unearth potential security flaws.

Link: http://www.secniche.org/jsf/dissecting_jsf_pt_aks_kr.pdf

Aditya K Sood
SecNiche Security Labs
http://www.secniche.org

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/