<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>frameloss</title>
	<atom:link href="http://www.frameloss.org/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.frameloss.org</link>
	<description>Notes on Digital Security and Forensics</description>
	<lastBuildDate>Fri, 04 Nov 2011 22:33:32 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.2</generator>
		<item>
		<title>Making WordPress Stable on EC2-Micro</title>
		<link>http://www.frameloss.org/2011/11/04/making-wordpress-stable-on-ec2-micro/</link>
		<comments>http://www.frameloss.org/2011/11/04/making-wordpress-stable-on-ec2-micro/#comments</comments>
		<pubDate>Fri, 04 Nov 2011 22:10:45 +0000</pubDate>
		<dc:creator>tag</dc:creator>
				<category><![CDATA[Miscellaneous]]></category>

		<guid isPermaLink="false">http://www.frameloss.org/?p=590</guid>
		<description><![CDATA[EC2 Micro Instance Limitations EC2 offers a lot of advantages over many web site hosting options.  I am a bit of a control freak and like having full control over my web server.  This has advantages and disadvantages of course, meaning more work but more flexibility.  Running a WordPress blog on a micro instance can <a href='http://www.frameloss.org/2011/11/04/making-wordpress-stable-on-ec2-micro/'>[...]</a>]]></description>
		<wfw:commentRss>http://www.frameloss.org/2011/11/04/making-wordpress-stable-on-ec2-micro/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Using Google Chrome for Security Testing</title>
		<link>http://www.frameloss.org/2011/11/01/using-google-chrome-for-security-testing/</link>
		<comments>http://www.frameloss.org/2011/11/01/using-google-chrome-for-security-testing/#comments</comments>
		<pubDate>Tue, 01 Nov 2011 17:32:35 +0000</pubDate>
		<dc:creator>tag</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Web Security]]></category>

		<guid isPermaLink="false">http://www.frameloss.org/?p=569</guid>
		<description><![CDATA[The first time I used Chrome during a web application security review I had a rather unpleasant surprise.  I had audited applications from the same developers before and found countless XSS errors.  This time it looked like they had fixed all those problems!  Little did I know that Chrome was actually performing filtering for reflected <a href='http://www.frameloss.org/2011/11/01/using-google-chrome-for-security-testing/'>[...]</a>]]></description>
		<wfw:commentRss>http://www.frameloss.org/2011/11/01/using-google-chrome-for-security-testing/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Firewire Attacks Against Mac OS Lion FileVault 2 Encryption</title>
		<link>http://www.frameloss.org/2011/09/18/firewire-attacks-against-mac-os-lion-filevault-2-encryption/</link>
		<comments>http://www.frameloss.org/2011/09/18/firewire-attacks-against-mac-os-lion-filevault-2-encryption/#comments</comments>
		<pubDate>Mon, 19 Sep 2011 00:35:55 +0000</pubDate>
		<dc:creator>tag</dc:creator>
				<category><![CDATA[Apple]]></category>
		<category><![CDATA[Forensics]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://www.frameloss.org/?p=540</guid>
		<description><![CDATA[There is some question about the extent to which Lion and FileVault is vulnerable to Firewire DMA attacks.  I performed some research (full paper is available below) and can present the following results: Retrieving plain text passwords from RAM on Mac OS Lion (10.7) can be done under most circumstances where the system is using <a href='http://www.frameloss.org/2011/09/18/firewire-attacks-against-mac-os-lion-filevault-2-encryption/'>[...]</a>]]></description>
		<wfw:commentRss>http://www.frameloss.org/2011/09/18/firewire-attacks-against-mac-os-lion-filevault-2-encryption/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Cracking Mac OS Lion Passwords</title>
		<link>http://www.frameloss.org/2011/09/05/cracking-macos-lion-passwords/</link>
		<comments>http://www.frameloss.org/2011/09/05/cracking-macos-lion-passwords/#comments</comments>
		<pubDate>Tue, 06 Sep 2011 02:13:38 +0000</pubDate>
		<dc:creator>tag</dc:creator>
				<category><![CDATA[Apple]]></category>
		<category><![CDATA[Forensics]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://www.frameloss.org/?p=507</guid>
		<description><![CDATA[Update Nov. 4, 2011: John&#8217;s jumbo version now has support for cracking these hashes too.  (Thanks solardiz for pointing this out!) Update Sept. 7, 2011: There is a better way to get at the hashes, have a look at the &#8220;davegrohl&#8221; tool (here is a locally mirrored copy of version 1.0).  I&#8217;ll leave this post <a href='http://www.frameloss.org/2011/09/05/cracking-macos-lion-passwords/'>[...]</a>]]></description>
		<wfw:commentRss>http://www.frameloss.org/2011/09/05/cracking-macos-lion-passwords/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Resources for Learning Web Application Security</title>
		<link>http://www.frameloss.org/2011/08/09/learning-web-security/</link>
		<comments>http://www.frameloss.org/2011/08/09/learning-web-security/#comments</comments>
		<pubDate>Wed, 10 Aug 2011 03:06:03 +0000</pubDate>
		<dc:creator>tag</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Web Security]]></category>

		<guid isPermaLink="false">http://www.frameloss.org/?p=461</guid>
		<description><![CDATA[I put together a list of resources for practicing and learning web security assessment techniques.  The list is far from complete, but has a few resources that I have found useful for improving my web app assessment skills. webseclab http://www.webseclab.com/ Webseclab is without a doubt the best platform out there for learning recent web attacks; <a href='http://www.frameloss.org/2011/08/09/learning-web-security/'>[...]</a>]]></description>
		<wfw:commentRss>http://www.frameloss.org/2011/08/09/learning-web-security/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Stopping Brute-force Logins Against WordPress</title>
		<link>http://www.frameloss.org/2011/07/29/stopping-brute-force-logins-against-wordpress/</link>
		<comments>http://www.frameloss.org/2011/07/29/stopping-brute-force-logins-against-wordpress/#comments</comments>
		<pubDate>Sat, 30 Jul 2011 02:12:10 +0000</pubDate>
		<dc:creator>tag</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Web Security]]></category>

		<guid isPermaLink="false">http://www.frameloss.org/?p=449</guid>
		<description><![CDATA[In my last post I showed how to use Selenium to make complex brute force attacks easier.  I showed a very basic and quick example against my website.  Here is an even shorter post on how to mitigate the attack using the mod_security Apache module.  I won&#8217;t cover how to install it or configure it, <a href='http://www.frameloss.org/2011/07/29/stopping-brute-force-logins-against-wordpress/'>[...]</a>]]></description>
		<wfw:commentRss>http://www.frameloss.org/2011/07/29/stopping-brute-force-logins-against-wordpress/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Selenium for Web App Pentesting</title>
		<link>http://www.frameloss.org/2011/07/23/selenium-for-web-app-pentesting/</link>
		<comments>http://www.frameloss.org/2011/07/23/selenium-for-web-app-pentesting/#comments</comments>
		<pubDate>Sat, 23 Jul 2011 18:58:04 +0000</pubDate>
		<dc:creator>tag</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Web Security]]></category>

		<guid isPermaLink="false">http://www.frameloss.org/?p=394</guid>
		<description><![CDATA[There is a uptick in brute force attacks as related to web applications.  The Web Hacking Incident Database keeps track of many attacks, and compiles the results; they show that insufficient anti-automation (which includes DoS attacks, but I won&#8217;t be covering that today) are the number one cause of web site incidents. Using brute force <a href='http://www.frameloss.org/2011/07/23/selenium-for-web-app-pentesting/'>[...]</a>]]></description>
		<wfw:commentRss>http://www.frameloss.org/2011/07/23/selenium-for-web-app-pentesting/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>DNSSEC Continued . . . Windows 2008R2 as Primary</title>
		<link>http://www.frameloss.org/2011/07/05/dnssec-continued-windows-2008r2-as-primary/</link>
		<comments>http://www.frameloss.org/2011/07/05/dnssec-continued-windows-2008r2-as-primary/#comments</comments>
		<pubDate>Tue, 05 Jul 2011 23:19:12 +0000</pubDate>
		<dc:creator>tag</dc:creator>
				<category><![CDATA[Network Security]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://www.frameloss.org/?p=357</guid>
		<description><![CDATA[I&#8217;ll be honest, I&#8217;m not a big fan of the Windows DNS service.  There are cases where an organization might want to use the Windows DNS service as a primary for their Internet facing zones.  I wanted to see how DNSSEC was setup on Windows and if Bind 9 could slave off of it.  Turns <a href='http://www.frameloss.org/2011/07/05/dnssec-continued-windows-2008r2-as-primary/'>[...]</a>]]></description>
		<wfw:commentRss>http://www.frameloss.org/2011/07/05/dnssec-continued-windows-2008r2-as-primary/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>The GPU Killed the Password.</title>
		<link>http://www.frameloss.org/2011/07/03/the-gpu-killed-the-password/</link>
		<comments>http://www.frameloss.org/2011/07/03/the-gpu-killed-the-password/#comments</comments>
		<pubDate>Sun, 03 Jul 2011 07:16:02 +0000</pubDate>
		<dc:creator>tag</dc:creator>
				<category><![CDATA[Forensics]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://www.frameloss.org/?p=349</guid>
		<description><![CDATA[About once a year I take the time to read up on the latest in password cracking techniques, try them out, and decide if anything really warrants a change in my behavior.  Well things have definitely heated up over the last couple of years. Rainbow tables were the last big thing in password attacks.  It&#8217;s <a href='http://www.frameloss.org/2011/07/03/the-gpu-killed-the-password/'>[...]</a>]]></description>
		<wfw:commentRss>http://www.frameloss.org/2011/07/03/the-gpu-killed-the-password/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>DNSSEC on Bind 9.7</title>
		<link>http://www.frameloss.org/2011/06/30/dnssec-on-bind-9-7/</link>
		<comments>http://www.frameloss.org/2011/06/30/dnssec-on-bind-9-7/#comments</comments>
		<pubDate>Thu, 30 Jun 2011 17:06:12 +0000</pubDate>
		<dc:creator>tag</dc:creator>
				<category><![CDATA[Network Security]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://www.frameloss.org/?p=331</guid>
		<description><![CDATA[I have been reading about DNSSEC and decided to do some quick testing. One of the questions I had was, what happens with slave nameservers?  How does DNSSEC work with a slave?  Does it need copies of keys?  If my hosting provider is slaved off of me, and running Bind 9.x what extra steps need <a href='http://www.frameloss.org/2011/06/30/dnssec-on-bind-9-7/'>[...]</a>]]></description>
		<wfw:commentRss>http://www.frameloss.org/2011/06/30/dnssec-on-bind-9-7/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

