L’home dibuixat

[Jeremiah Grossman] Top Ten Web Hacking Techniques of 2009 (Official). Una "top 10" de les noves tècniques de hacking descobertes durant l'any 2009

1. Creating a rogue CA certificate
Alexander Sotirov, Marc Stevens, Jacob Appelbaum, Arjen Lenstra, David Molnar, Dag Arne Osvik, Benne de Weger

2. HTTP Parameter Pollution (HPP)
Luca Carettoni, Stefano diPaola

3. Flickr's API Signature Forgery Vulnerability (MD5 extension attack)
Thai Duong i Juliano Rizzo

4. Cross-domain search timing
Chris Evans

5. Slowloris HTTP DoS
Robert Hansen, (inicialment descoberta per Adrian Ilarion Ciobanu i Ivan Ristic i documentada a la secció "Programming Model Attacks" d'Apache Security, però sense crear una eina)

6. Microsoft IIS 0-Day Vulnerability Parsing Files (semi‐colon bug)
Soroush Dalili

7. Exploiting unexploitable XSS
Stephen Sclafani

8. Our Favorite XSS Filters and how to Attack them
Eduardo Vela (sirdarckcat), David Lindsay (thornmaker)

9. RFC1918 Caching Security Issues
Robert Hansen

10. DNS Rebinding (sèrie en tres parts: Persistent Cookies, Scraping & Spamming i Session Fixation)
Robert Hansen