<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" media="screen" href="/~d/styles/atom10full.xsl"?><?xml-stylesheet type="text/css" media="screen" href="http://feeds.feedburner.com/~d/styles/itemcontent.css"?><feed xmlns="http://www.w3.org/2005/Atom" xmlns:thr="http://purl.org/syndication/thread/1.0" xmlns:feedburner="http://rssnamespace.org/feedburner/ext/1.0" xml:lang="en" xml:base="http://www.frameloss.org/wp-atom.php">
	<title type="text">frameloss</title>
	<subtitle type="text">Notes on Digital Security and Forensics</subtitle>

	<updated>2012-05-23T19:45:59Z</updated>

	<link rel="alternate" type="text/html" href="http://www.frameloss.org" />
	<id>http://www.frameloss.org/feed/atom/</id>
	

	<generator uri="http://wordpress.org/" version="3.3.2">WordPress</generator>
		<atom10:link xmlns:atom10="http://www.w3.org/2005/Atom" rel="self" type="application/atom+xml" href="http://feeds.feedburner.com/frameloss" /><feedburner:info uri="frameloss" /><atom10:link xmlns:atom10="http://www.w3.org/2005/Atom" rel="hub" href="http://pubsubhubbub.appspot.com/" /><entry>
		<author>
			<name>tag</name>
					</author>
		<title type="html"><![CDATA[Installing WebGoat.net using Apache on Ubuntu]]></title>
		<link rel="alternate" type="text/html" href="http://feedproxy.google.com/~r/frameloss/~3/PtnfE_GPqVU/" />
		<id>http://www.frameloss.org/?p=671</id>
		<updated>2012-05-23T19:45:59Z</updated>
		<published>2012-05-23T17:50:39Z</published>
		<category scheme="http://www.frameloss.org" term="Security" /><category scheme="http://www.frameloss.org" term="Web Security" />		<summary type="html"><![CDATA[At the recent OWASP Snowfroc conference in Denver, Jerry Hoff presented a new OWASP project called WebGoat.net, a .NET application designed for training classes.  It is designed to run on Linux using the Apache web server.  You can probably easily also run it on nginx or even IIS on Windows if you were so inclined.  I <a href='http://www.frameloss.org/2012/05/23/installing-webgoat-net-using-apache-on-ubuntu/'>[...]</a>]]></summary>
		<link rel="replies" type="text/html" href="http://www.frameloss.org/2012/05/23/installing-webgoat-net-using-apache-on-ubuntu/#comments" thr:count="0" />
		<link rel="replies" type="application/atom+xml" href="http://www.frameloss.org/2012/05/23/installing-webgoat-net-using-apache-on-ubuntu/feed/atom/" thr:count="0" />
		<thr:total>0</thr:total>
	<feedburner:origLink>http://www.frameloss.org/2012/05/23/installing-webgoat-net-using-apache-on-ubuntu/</feedburner:origLink></entry>
		<entry>
		<author>
			<name>tag</name>
					</author>
		<title type="html"><![CDATA[Making WordPress Stable on EC2-Micro]]></title>
		<link rel="alternate" type="text/html" href="http://feedproxy.google.com/~r/frameloss/~3/JrvkYDVFZh4/" />
		<id>http://www.frameloss.org/?p=590</id>
		<updated>2011-11-04T22:10:45Z</updated>
		<published>2011-11-04T22:10:45Z</published>
		<category scheme="http://www.frameloss.org" term="Miscellaneous" />		<summary type="html"><![CDATA[EC2 Micro Instance Limitations EC2 offers a lot of advantages over many web site hosting options.  I am a bit of a control freak and like having full control over my web server.  This has advantages and disadvantages of course, meaning more work but more flexibility.  Running a WordPress blog on a micro instance can <a href='http://www.frameloss.org/2011/11/04/making-wordpress-stable-on-ec2-micro/'>[...]</a>]]></summary>
		<link rel="replies" type="text/html" href="http://www.frameloss.org/2011/11/04/making-wordpress-stable-on-ec2-micro/#comments" thr:count="0" />
		<link rel="replies" type="application/atom+xml" href="http://www.frameloss.org/2011/11/04/making-wordpress-stable-on-ec2-micro/feed/atom/" thr:count="0" />
		<thr:total>0</thr:total>
	<feedburner:origLink>http://www.frameloss.org/2011/11/04/making-wordpress-stable-on-ec2-micro/</feedburner:origLink></entry>
		<entry>
		<author>
			<name>tag</name>
					</author>
		<title type="html"><![CDATA[Using Google Chrome for Security Testing]]></title>
		<link rel="alternate" type="text/html" href="http://feedproxy.google.com/~r/frameloss/~3/1Ms0QjBJFOQ/" />
		<id>http://www.frameloss.org/?p=569</id>
		<updated>2011-11-01T17:49:13Z</updated>
		<published>2011-11-01T17:32:35Z</published>
		<category scheme="http://www.frameloss.org" term="Security" /><category scheme="http://www.frameloss.org" term="Web Security" />		<summary type="html"><![CDATA[The first time I used Chrome during a web application security review I had a rather unpleasant surprise.  I had audited applications from the same developers before and found countless XSS errors.  This time it looked like they had fixed all those problems!  Little did I know that Chrome was actually performing filtering for reflected <a href='http://www.frameloss.org/2011/11/01/using-google-chrome-for-security-testing/'>[...]</a>]]></summary>
		<link rel="replies" type="text/html" href="http://www.frameloss.org/2011/11/01/using-google-chrome-for-security-testing/#comments" thr:count="1" />
		<link rel="replies" type="application/atom+xml" href="http://www.frameloss.org/2011/11/01/using-google-chrome-for-security-testing/feed/atom/" thr:count="1" />
		<thr:total>1</thr:total>
	<feedburner:origLink>http://www.frameloss.org/2011/11/01/using-google-chrome-for-security-testing/</feedburner:origLink></entry>
		<entry>
		<author>
			<name>tag</name>
					</author>
		<title type="html"><![CDATA[Firewire Attacks Against Mac OS Lion FileVault 2 Encryption]]></title>
		<link rel="alternate" type="text/html" href="http://feedproxy.google.com/~r/frameloss/~3/x0asj8QSUaI/" />
		<id>http://www.frameloss.org/?p=540</id>
		<updated>2011-09-23T20:43:32Z</updated>
		<published>2011-09-19T00:35:55Z</published>
		<category scheme="http://www.frameloss.org" term="Apple" /><category scheme="http://www.frameloss.org" term="Forensics" /><category scheme="http://www.frameloss.org" term="Security" />		<summary type="html"><![CDATA[There is some question about the extent to which Lion and FileVault is vulnerable to Firewire DMA attacks.  I performed some research (full paper is available below) and can present the following results: Retrieving plain text passwords from RAM on Mac OS Lion (10.7) can be done under most circumstances where the system is using <a href='http://www.frameloss.org/2011/09/18/firewire-attacks-against-mac-os-lion-filevault-2-encryption/'>[...]</a>]]></summary>
		<link rel="replies" type="text/html" href="http://www.frameloss.org/2011/09/18/firewire-attacks-against-mac-os-lion-filevault-2-encryption/#comments" thr:count="2" />
		<link rel="replies" type="application/atom+xml" href="http://www.frameloss.org/2011/09/18/firewire-attacks-against-mac-os-lion-filevault-2-encryption/feed/atom/" thr:count="2" />
		<thr:total>2</thr:total>
	<feedburner:origLink>http://www.frameloss.org/2011/09/18/firewire-attacks-against-mac-os-lion-filevault-2-encryption/</feedburner:origLink></entry>
		<entry>
		<author>
			<name>tag</name>
					</author>
		<title type="html"><![CDATA[Cracking Mac OS Lion Passwords]]></title>
		<link rel="alternate" type="text/html" href="http://feedproxy.google.com/~r/frameloss/~3/bx0G0DjReKQ/" />
		<id>http://www.frameloss.org/?p=507</id>
		<updated>2011-11-04T21:46:43Z</updated>
		<published>2011-09-06T02:13:38Z</published>
		<category scheme="http://www.frameloss.org" term="Apple" /><category scheme="http://www.frameloss.org" term="Forensics" /><category scheme="http://www.frameloss.org" term="Security" />		<summary type="html"><![CDATA[Update Nov. 4, 2011: John&#8217;s jumbo version now has support for cracking these hashes too.  (Thanks solardiz for pointing this out!) Update Sept. 7, 2011: There is a better way to get at the hashes, have a look at the &#8220;davegrohl&#8221; tool (here is a locally mirrored copy of version 1.0).  I&#8217;ll leave this post <a href='http://www.frameloss.org/2011/09/05/cracking-macos-lion-passwords/'>[...]</a>]]></summary>
		<link rel="replies" type="text/html" href="http://www.frameloss.org/2011/09/05/cracking-macos-lion-passwords/#comments" thr:count="0" />
		<link rel="replies" type="application/atom+xml" href="http://www.frameloss.org/2011/09/05/cracking-macos-lion-passwords/feed/atom/" thr:count="0" />
		<thr:total>0</thr:total>
	<feedburner:origLink>http://www.frameloss.org/2011/09/05/cracking-macos-lion-passwords/</feedburner:origLink></entry>
		<entry>
		<author>
			<name>tag</name>
					</author>
		<title type="html"><![CDATA[Resources for Learning Web Application Security]]></title>
		<link rel="alternate" type="text/html" href="http://feedproxy.google.com/~r/frameloss/~3/P-N4INuLX4c/" />
		<id>http://www.frameloss.org/?p=461</id>
		<updated>2011-08-11T06:13:37Z</updated>
		<published>2011-08-10T03:06:03Z</published>
		<category scheme="http://www.frameloss.org" term="Security" /><category scheme="http://www.frameloss.org" term="Web Security" />		<summary type="html"><![CDATA[I put together a list of resources for practicing and learning web security assessment techniques.  The list is far from complete, but has a few resources that I have found useful for improving my web app assessment skills. webseclab http://www.webseclab.com/ Webseclab is without a doubt the best platform out there for learning recent web attacks; <a href='http://www.frameloss.org/2011/08/09/learning-web-security/'>[...]</a>]]></summary>
		<link rel="replies" type="text/html" href="http://www.frameloss.org/2011/08/09/learning-web-security/#comments" thr:count="0" />
		<link rel="replies" type="application/atom+xml" href="http://www.frameloss.org/2011/08/09/learning-web-security/feed/atom/" thr:count="0" />
		<thr:total>0</thr:total>
	<feedburner:origLink>http://www.frameloss.org/2011/08/09/learning-web-security/</feedburner:origLink></entry>
		<entry>
		<author>
			<name>tag</name>
					</author>
		<title type="html"><![CDATA[Stopping Brute-force Logins Against WordPress]]></title>
		<link rel="alternate" type="text/html" href="http://feedproxy.google.com/~r/frameloss/~3/G5XUdOP7VfU/" />
		<id>http://www.frameloss.org/?p=449</id>
		<updated>2011-10-31T17:25:28Z</updated>
		<published>2011-07-30T02:12:10Z</published>
		<category scheme="http://www.frameloss.org" term="Security" /><category scheme="http://www.frameloss.org" term="Web Security" />		<summary type="html"><![CDATA[In my last post I showed how to use Selenium to make complex brute force attacks easier.  I showed a very basic and quick example against my website.  Here is an even shorter post on how to mitigate the attack using the mod_security Apache module.  I won&#8217;t cover how to install it or configure it, <a href='http://www.frameloss.org/2011/07/29/stopping-brute-force-logins-against-wordpress/'>[...]</a>]]></summary>
		<link rel="replies" type="text/html" href="http://www.frameloss.org/2011/07/29/stopping-brute-force-logins-against-wordpress/#comments" thr:count="0" />
		<link rel="replies" type="application/atom+xml" href="http://www.frameloss.org/2011/07/29/stopping-brute-force-logins-against-wordpress/feed/atom/" thr:count="0" />
		<thr:total>0</thr:total>
	<feedburner:origLink>http://www.frameloss.org/2011/07/29/stopping-brute-force-logins-against-wordpress/</feedburner:origLink></entry>
		<entry>
		<author>
			<name>tag</name>
					</author>
		<title type="html"><![CDATA[Selenium for Web App Pentesting]]></title>
		<link rel="alternate" type="text/html" href="http://feedproxy.google.com/~r/frameloss/~3/B9S8GCsdbjE/" />
		<id>http://www.frameloss.org/?p=394</id>
		<updated>2011-08-11T06:14:41Z</updated>
		<published>2011-07-23T18:58:04Z</published>
		<category scheme="http://www.frameloss.org" term="Security" /><category scheme="http://www.frameloss.org" term="Web Security" />		<summary type="html"><![CDATA[There is a uptick in brute force attacks as related to web applications.  The Web Hacking Incident Database keeps track of many attacks, and compiles the results; they show that insufficient anti-automation (which includes DoS attacks, but I won&#8217;t be covering that today) are the number one cause of web site incidents. Using brute force <a href='http://www.frameloss.org/2011/07/23/selenium-for-web-app-pentesting/'>[...]</a>]]></summary>
		<link rel="replies" type="text/html" href="http://www.frameloss.org/2011/07/23/selenium-for-web-app-pentesting/#comments" thr:count="0" />
		<link rel="replies" type="application/atom+xml" href="http://www.frameloss.org/2011/07/23/selenium-for-web-app-pentesting/feed/atom/" thr:count="0" />
		<thr:total>0</thr:total>
	<feedburner:origLink>http://www.frameloss.org/2011/07/23/selenium-for-web-app-pentesting/</feedburner:origLink></entry>
		<entry>
		<author>
			<name>tag</name>
					</author>
		<title type="html"><![CDATA[DNSSEC Continued . . . Windows 2008R2 as Primary]]></title>
		<link rel="alternate" type="text/html" href="http://feedproxy.google.com/~r/frameloss/~3/nY__zhiG-6s/" />
		<id>http://www.frameloss.org/?p=357</id>
		<updated>2011-08-11T15:17:04Z</updated>
		<published>2011-07-05T23:19:12Z</published>
		<category scheme="http://www.frameloss.org" term="Network Security" /><category scheme="http://www.frameloss.org" term="Security" />		<summary type="html"><![CDATA[I&#8217;ll be honest, I&#8217;m not a big fan of the Windows DNS service.  There are cases where an organization might want to use the Windows DNS service as a primary for their Internet facing zones.  I wanted to see how DNSSEC was setup on Windows and if Bind 9 could slave off of it.  Turns <a href='http://www.frameloss.org/2011/07/05/dnssec-continued-windows-2008r2-as-primary/'>[...]</a>]]></summary>
		<link rel="replies" type="text/html" href="http://www.frameloss.org/2011/07/05/dnssec-continued-windows-2008r2-as-primary/#comments" thr:count="0" />
		<link rel="replies" type="application/atom+xml" href="http://www.frameloss.org/2011/07/05/dnssec-continued-windows-2008r2-as-primary/feed/atom/" thr:count="0" />
		<thr:total>0</thr:total>
	<feedburner:origLink>http://www.frameloss.org/2011/07/05/dnssec-continued-windows-2008r2-as-primary/</feedburner:origLink></entry>
		<entry>
		<author>
			<name>tag</name>
					</author>
		<title type="html"><![CDATA[The GPU Killed the Password.]]></title>
		<link rel="alternate" type="text/html" href="http://feedproxy.google.com/~r/frameloss/~3/Ls2Fpx25E34/" />
		<id>http://www.frameloss.org/?p=349</id>
		<updated>2011-08-11T15:17:18Z</updated>
		<published>2011-07-03T07:16:02Z</published>
		<category scheme="http://www.frameloss.org" term="Forensics" /><category scheme="http://www.frameloss.org" term="Security" />		<summary type="html"><![CDATA[About once a year I take the time to read up on the latest in password cracking techniques, try them out, and decide if anything really warrants a change in my behavior.  Well things have definitely heated up over the last couple of years. Rainbow tables were the last big thing in password attacks.  It&#8217;s <a href='http://www.frameloss.org/2011/07/03/the-gpu-killed-the-password/'>[...]</a>]]></summary>
		<link rel="replies" type="text/html" href="http://www.frameloss.org/2011/07/03/the-gpu-killed-the-password/#comments" thr:count="1" />
		<link rel="replies" type="application/atom+xml" href="http://www.frameloss.org/2011/07/03/the-gpu-killed-the-password/feed/atom/" thr:count="1" />
		<thr:total>1</thr:total>
	<feedburner:origLink>http://www.frameloss.org/2011/07/03/the-gpu-killed-the-password/</feedburner:origLink></entry>
	</feed><!-- Dynamic page generated in 0.244 seconds. --><!-- Cached page generated by WP-Super-Cache on 2012-05-25 21:29:20 --><!-- Compression = gzip -->

