PHPIDS » Web Application Security 2.0

Credits

The PHPIDS Team would like to thank:

LeverOne

for his outstanding work, testing and XSS vectors from the depths of markup hell

Kishor

for providing cutting edge XSS and great help in the group

Martin Hinks

for great hints, the .NETIDS and help with false positives

SirDarckCat

for providing XSS so advanced it made us shiver

Gareth Heyes

for his help enhancing the rules and very creative XSS vectors

Kevin Schroeder

for the audit and great help on testing and enhancing the PHPIDS

xorrer

for his help optimizing the rules against his cryptic and sophisticated XSS vectors

Johannes Dahse

for his help optimizing the SQLI rules

Roberto Salgado

for helping hardening the SQLI rules with his SQL-Fu

tx

for even more outstanding SQLI stuff and almost magic PHP code injection vectors

Giorgio Maone

for redefining the word JavaScript with his vectors

thornmaker

for submitting smart and very hard to detect JavaScript concatenation vectors

Martin Trauth

for helping us with the design and giving hints on estate usability

Ronald v.d. Heetkamp

for helping on the SQLI and XSS detection issues

Dan

for helping i18n-ing the PHPIDS

CrYpTiC_MauleR

for providing great hints and XSS magic

Robert Hansen

for providing (sl|h)a.ckers.org and the XSS cheat sheet

beford

for providing great hints and esoteric but working XSS

and anyone else…

… who helped testing and enhancing the PHPIDS