25th Chaos Computer Congress

The 25th Chaos Computer Congress has started and they have live stream. More about here: http://blog.security4all.be/2008/12/following-25th-chaos-computer-congress.html

Web applications's security reports

I found a lot of report about how vulnerable the web applications are. Here is the link: http://jeremiahgrossman.blogspot.com/2008/12/its-unanimous.html

ASP security

Here are some links about general security and to secure your asp web application against sql injection and xss.
http://msdn.microsoft.com/en-us/magazine/cc301387.aspx
http://www.sans.org/resources/policies/asp_standards.pdf
http://www.asp.net/Learn/Security/
http://msdn.microsoft.com/en-us/library/ms998274.aspx
http://msdn.microsoft.com/en-us/library/ms998258.aspx
http://www.guidanceshare.com/wiki/How_To_Protect_from_Injection_Attacks_in_ASP.NET_2.0
http://msdn.microsoft.com/en-us/library/ms998271.aspx

A quick w3af introduction

To read it, click here.

w3af windows installation

First, install Python's 2.5.2 version. After it, download and open the w3af-beta-7-r1812.exe file. You will see this picture. Click the Next button.
The installer checks, that we have got the python's 2.5 version. We must install it, before we start the installation, because we can't install w3af. Click the Next button.
We can read the GNU GPL license. If you agree with it, Click theI Agree button, if not, click the Cancel button and the installation will break. So click the I Agree button.
We can choose the installation type: Full, Costum, Minimal. Choose the Full, then click the Next button.
We can give the directory of w3af where we want to install, then click the Next button.
We can give Start Menu folder, where we want to create the program's shortcuts. Click the Next button.
The installation is begin. Through the installation, we can install the dependencies.

Here we can see the installation of the pygtk-2.12.1. We have to do just click the Next and Finish button. Click the Next button.
Click the Next button.
The pygtk-2.12.1 is installing.
The installation is done. Click the Finish button. That's what we have to do when we install the other dependencies.Click the Next button.
The installation of w3af is done. Before we click the Finish button, we have to install the Opensslwin dependency. We can do this just like before we install the pygtk-2.12.1.
Before we start to use w3af, it is recommended to read the User Guide. After we click the Finish button, we have to see this.