The presenters will discuss a number of issues revolving around web application security. Topics include; remotely fingerprinting web servers, the new Cross Site Tracing vulnerability, and web application forensics. Attendees will see demonstrations of new tools to fingerprint web servers and to uncover web application attacks..