The June meeting of the Denver OWASP chapter was be on June 21st at 7:00PM. [http://www.accuvant.com Accuvant] hosted the meeting at their downtown office. Refreshments were be provided by [http://www.symplified.com Symplified].

The technical presentation was by David Byrne from EchoStar Satellite. He spoke on Anti-DNS pinning attacks, a technique that allows an attacker to leverage cross-site-scripting to turn a web browser into a proxy server. This is done using standard browser functionality; no client-side vulnerabilities are required. The end-result is that network firewalls can are completly bypassed to access internal servers. [[Image:anti-dns-pinning.ppt Slides]]

The non/less technical presentation will be by David Stevens from Symplified. He will discuss methods to calculate Return on Security Investment (ROSI). Considering how difficult it often is to get funding for security initiatives, this is a useful skill for any security professional or security manager.

2007-03-22T15:49:11Z

User talk:Davidribyrne@yahoo.com

2007-02-19T18:33:26Z

Davidribyrne@yahoo.com:

<%00script
asd<f>alert("hi");</script>

User talk:Davidribyrne@yahoo.com

2007-02-19T18:27:59Z

Davidribyrne@yahoo.com:

< script
asd<f>alert("hi");</script>

User talk:Davidribyrne@yahoo.com

2007-02-19T18:24:46Z

Davidribyrne@yahoo.com:

User talk:Davidribyrne@yahoo.com

2007-02-18T18:18:09Z

Davidribyrne@yahoo.com: New page: <script�>alert("hi");</script�>

OWASP Community

2007-02-18T18:09:57Z

Davidribyrne@yahoo.com:

Denver January 2007 meeting

2007-02-18T18:04:15Z

Davidribyrne@yahoo.com: New page: == January 2007 Meeting == The next meeting will be on January 17, 6:30PM at EchoStar Satellite's headquarters south of the DTC. The classroom we are meeting in can easily hold 50 people;...

== January 2007 Meeting ==

The next meeting will be on January 17, 6:30PM at EchoStar Satellite's headquarters south of the DTC. The classroom we are meeting in can easily hold 50 people; far more if we crowd in. This should make for more breathing room than last month. If you think you may attend, please RSVP to [david.byrne@echostar.com] with your name and company. Directions can be found [http://maps.google.com/maps?f=d&hl=en&saddr=I-25+(N)+%26+E+Lincoln+Ave,+Parker,+CO+80134&daddr=9601+S.+Meridian+Blvd+Englewood,+co+80112&ie=UTF8&sll=39.54211,-104.86157&sspn=0.022107,0.058365&z=14&om=1 here]. Come to the main entrance and tell the security guard you are with the OWASP meeting. If you get lost, call David Byrne at (desk) 720-514-5675 or (cell) 303-912-2612.

Michael Walter will be giving a presentation on security in the SDLC and David Ferguson with [http://www.fishnetsecurity.com/ FishNet Security] (and the leader of the Kansas City OWASP chapter) will be presenting on session managment and web services.

The [http://www.southseascorp.com/ South Seas Corporation] will be providing food & drink.

Denver

2007-02-18T18:03:59Z

Davidribyrne@yahoo.com: /* Past Meetings */

{{Chapter Template|chaptername=Denver|extra=The chapter leaders are [mailto:davidribyrne@yahoo.com David Byrne] and [mailto:owasp@justplainpix.com Andy Lewis]. |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-denver|emailarchives=http://lists.owasp.org/pipermail/owasp-denver}}

== Future Meetings ==
Below is a list of potential topics for future meetings. If you are interested in presenting, or at least contributing to the content of a presentation on any topic, please send [mailto:davidribyrne@yahoo.com David Byrne] an e-mail. Feel free to submit ideas for other topics as well.

* Common security mistakes and best practices for
** AJAX
** .Net
** J2EE
* Performing security-oriented code reviews
* HTTP message spliting attacksCommon mistakes and best practices for
* Authentication: single-sign-on, identity managment, LDAP injection attacks, etc
* Payment Card Industry (PCI) compliance, relating to web apps
* Sarbanes Oxley (SOX) compliance, relating to web apps
* Return on Security Investment (ROSI) calculations

== February 2007 Meeting ==

The next meeting will be on February 21, 6:30PM at EchoStar Satellite's headquarters south of the DTC. If you think you may attend, please RSVP to [david.byrne@echostar.com] with your name and company. Directions can be found [http://maps.google.com/maps?f=d&hl=en&saddr=I-25+(N)+%26+E+Lincoln+Ave,+Parker,+CO+80134&daddr=9601+S.+Meridian+Blvd+Englewood,+co+80112&ie=UTF8&sll=39.54211,-104.86157&sspn=0.022107,0.058365&z=14&om=1 here]. Come to the main entrance and tell the security guard you are with the OWASP meeting. If you get lost, call David Byrne at (desk) 720-514-5675 or (cell) 303-912-2612.

Buck Watia from [http://www.verisign.com/ Verisign] will be presenting on Advanced SQL Injection.

[http://www.fishnetsecurity.com/ FishNet Security] will be providing food & drink.

== Past Meetings ==

[[Denver November 2006 meeting|November 2006]]

[[Denver January 2007 meeting|January 2007]]

Denver

2007-02-18T18:03:39Z

Davidribyrne@yahoo.com:

{{Chapter Template|chaptername=Denver|extra=The chapter leaders are [mailto:davidribyrne@yahoo.com David Byrne] and [mailto:owasp@justplainpix.com Andy Lewis]. |mailinglistsite=http://lists.owasp.org/mailman/listinfo/owasp-denver|emailarchives=http://lists.owasp.org/pipermail/owasp-denver}}

== Future Meetings ==
Below is a list of potential topics for future meetings. If you are interested in presenting, or at least contributing to the content of a presentation on any topic, please send [mailto:davidribyrne@yahoo.com David Byrne] an e-mail. Feel free to submit ideas for other topics as well.

* Common security mistakes and best practices for
** AJAX
** .Net
** J2EE
* Performing security-oriented code reviews
* HTTP message spliting attacksCommon mistakes and best practices for
* Authentication: single-sign-on, identity managment, LDAP injection attacks, etc
* Payment Card Industry (PCI) compliance, relating to web apps
* Sarbanes Oxley (SOX) compliance, relating to web apps
* Return on Security Investment (ROSI) calculations

== February 2007 Meeting ==

The next meeting will be on February 21, 6:30PM at EchoStar Satellite's headquarters south of the DTC. If you think you may attend, please RSVP to [david.byrne@echostar.com] with your name and company. Directions can be found [http://maps.google.com/maps?f=d&hl=en&saddr=I-25+(N)+%26+E+Lincoln+Ave,+Parker,+CO+80134&daddr=9601+S.+Meridian+Blvd+Englewood,+co+80112&ie=UTF8&sll=39.54211,-104.86157&sspn=0.022107,0.058365&z=14&om=1 here]. Come to the main entrance and tell the security guard you are with the OWASP meeting. If you get lost, call David Byrne at (desk) 720-514-5675 or (cell) 303-912-2612.

Buck Watia from [http://www.verisign.com/ Verisign] will be presenting on Advanced SQL Injection.

[http://www.fishnetsecurity.com/ FishNet Security] will be providing food & drink.

== Past Meetings ==

[[Denver November 2006 meeting|November 2006]]
[[Denver January 2007 meeting|January 2007]]

SQL Injection Cookbook - MSSQL

2007-01-17T01:08:58Z

Davidribyrne@yahoo.com:

__TOC__
=Database objects=
==Tables==
===List table names===
===List columns for a specific table===
===View table permissions===
===Change table permissions===
===Create a table===

==Stored procedures or functions==
===List stored procedures or functions===
===Parameters for a stored procedure or function===
===Source code of a stored procedure or function===
===Create a stored procedure or function===

=System data=
==Users==
===Identify current user===
===List of database users===
===List of database administrators===
===Database user permissions===
===Create a new user===
===Change a user password===
===Delete a user===

==Database server==
===View database server settings===
===Change database server settings===
===View database server processes===
===Kill database server process===

==Host Operating System==
===Operating System version===
===OS environment variables===
===Execute OS shell command===
===Read file contents===
===Arbitrary file writes===
===File uploads===

=Queries=
==Strings==
===Valid string delimiters===
===String concatenation===
===String-based queries with no quote characters===

==Query syntax==
===Result row count limiters===
===Acceptable whitespace===
===Tableless queries===
===Query comments===
===Command delimiters===
===Set operators===
Set operators are used to combine the results from two different queries. The number of columns and order of column types must be identical for both queries. The general syntax is

SELECT
fname, lname
FROM
employees
'''''SET_OPERATOR'''''
SELECT
fname, lname
FROM
customers

==Special queries==
===Single column queries===
===Single row queries===

==Functions, etc.==
===Data type casting===
===Query output to file===

=Attacks=
==Breaking out of a query==
===WHERE clauses===
===FROM clauses===
===Other parts of a SELECT===
===INSERT statements===
===UPDATE statements===

==Inference and timing attacks==
==SQL Tautologies==
A tautology is something that is inherently true. SQL tautologies are used when you want to force a query to return all results, basically ignoring any WHERE conditionals. Simple tautologies like " OR 1=1" are useful, but may be filtered out by some security tools. The table below offers a number of tautologies that filter writers (even on well known commercial tools) may not have considered.
{| style="width:75%;" border="1" cellspacing="0" cellpadding="5"
! width="55%"|Statement
! width="15%"|Numeric
(1 = 1)
! width="15%"|String
('a' = 'a')
! width="15%"|Binary
(0x1 = 0x1)
|-
| '''''a''''' = '''''a'''''
| align="center" | X
| align="center" | X
| align="center" | X
|}

=Data exfiltration=
==E-mail==
==Web==
==General network==

=Platform specific=
==Unique database platform features==
==Authoritative documentation resources==
==Links==