<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>My Pen Test</title>
	<atom:link href="http://www.mypentest.com/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.mypentest.com</link>
	<description>Penetration Testing Web applications</description>
	<lastBuildDate>Sat, 16 May 2009 03:15:28 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.4</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>How to find out what WordPress plugins a site uses</title>
		<link>http://www.mypentest.com/find-all-wordpress-plugins-for-site/</link>
		<comments>http://www.mypentest.com/find-all-wordpress-plugins-for-site/#comments</comments>
		<pubDate>Sat, 16 May 2009 00:54:37 +0000</pubDate>
		<dc:creator>Stuart Moncrieff</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[C]]></category>
		<category><![CDATA[VuGen]]></category>
		<category><![CDATA[WordPress]]></category>

		<guid isPermaLink="false">http://www.mypentest.com/?p=86</guid>
		<description><![CDATA[One of the first steps of any web application security audit is to determine what software is installed, which allows you to search for known vulnerabilities at websites like Bugtraq.
The Weblog Tools Collection blog recently had a post asking readers to guess how many WordPress plugins they had installed, with the prize being a pro [...]]]></description>
		<wfw:commentRss>http://www.mypentest.com/find-all-wordpress-plugins-for-site/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Content Scraping with VuGen</title>
		<link>http://www.mypentest.com/content-scraping-with-vugen/</link>
		<comments>http://www.mypentest.com/content-scraping-with-vugen/#comments</comments>
		<pubDate>Sun, 10 May 2009 08:17:58 +0000</pubDate>
		<dc:creator>Stuart Moncrieff</dc:creator>
				<category><![CDATA[VuGen]]></category>
		<category><![CDATA[C]]></category>
		<category><![CDATA[WordPress]]></category>

		<guid isPermaLink="false">http://www.mypentest.com/?p=72</guid>
		<description><![CDATA[As I&#8217;ve said before, VuGen makes a great content scraping tool for cases when you want a quick and dirty script to save specific data from multiple webpages. 
In this example, I wanted to create a list of all the WordPress plugins available from http://wordpress.org/extend/plugins/ (currently there are 4,245), and save all the metadata about [...]]]></description>
		<wfw:commentRss>http://www.mypentest.com/content-scraping-with-vugen/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Cross-Site Request Forgery Whitepaper</title>
		<link>http://www.mypentest.com/cross-site-request-forgery-whitepaper/</link>
		<comments>http://www.mypentest.com/cross-site-request-forgery-whitepaper/#comments</comments>
		<pubDate>Mon, 29 Sep 2008 23:34:27 +0000</pubDate>
		<dc:creator>Stuart Moncrieff</dc:creator>
				<category><![CDATA[Exploits]]></category>

		<guid isPermaLink="false">http://www.mypentest.com/?p=46</guid>
		<description><![CDATA[Princeton researchers released a research paper yesterday which documents Cross-Site Request Forgery vulnerabilities in 4 well known commercial websites (ING Direct, NY Times, Youtube, and Metafilter). It makes for interesting reading. 

Wikipedia article on Cross-Site Request Forgery
Jeff Atwood of Coding Horror has a blog post on CSRF
CSRF FAQ at CGI Security

]]></description>
		<wfw:commentRss>http://www.mypentest.com/cross-site-request-forgery-whitepaper/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Why HP is wrong about the Web Security Lifecycle</title>
		<link>http://www.mypentest.com/web-security-lifecycle/</link>
		<comments>http://www.mypentest.com/web-security-lifecycle/#comments</comments>
		<pubDate>Thu, 05 Jun 2008 02:44:00 +0000</pubDate>
		<dc:creator>Stuart Moncrieff</dc:creator>
				<category><![CDATA[WebInspect]]></category>
		<category><![CDATA[DevInspect]]></category>
		<category><![CDATA[HP Software]]></category>
		<category><![CDATA[QAInspect]]></category>

		<guid isPermaLink="false">http://www.mypentest.com/?p=41</guid>
		<description><![CDATA[In my first post I gave a very brief overview of the web security testing products offered by HP. Unfortunately people&#8217;s understanding of where the products should fit into the software development lifecycle is still weak. This is even the case inside HP.
Here is a current slide from HP Software&#8230;

The obvious, glaring problem with this [...]]]></description>
		<wfw:commentRss>http://www.mypentest.com/web-security-lifecycle/feed/</wfw:commentRss>
		<slash:comments>5</slash:comments>
		</item>
		<item>
		<title>Web Macro Recorder does not record</title>
		<link>http://www.mypentest.com/macro-recorder-does-not-record/</link>
		<comments>http://www.mypentest.com/macro-recorder-does-not-record/#comments</comments>
		<pubDate>Tue, 03 Jun 2008 09:31:24 +0000</pubDate>
		<dc:creator>Stuart Moncrieff</dc:creator>
				<category><![CDATA[WebInspect]]></category>
		<category><![CDATA[Web Macro Recorder]]></category>

		<guid isPermaLink="false">http://www.mypentest.com/?p=28</guid>
		<description><![CDATA[Something that confuses new users to WebInspect is that the Web Macro Recorder will not record any requests to http://127.0.0.1 or http://localhost. This can cause much head scratching for someone who just wants to try something out on their local machine.
The simple solution to this is to add an entry to your hosts file, and [...]]]></description>
		<wfw:commentRss>http://www.mypentest.com/macro-recorder-does-not-record/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>My car as an analogy for web security</title>
		<link>http://www.mypentest.com/web-security-car-analogy/</link>
		<comments>http://www.mypentest.com/web-security-car-analogy/#comments</comments>
		<pubDate>Sat, 17 May 2008 04:52:54 +0000</pubDate>
		<dc:creator>Stuart Moncrieff</dc:creator>
				<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://www.mypentest.com/?p=26</guid>
		<description><![CDATA[I live in a bad neighbourhood&#8230;well, okay, not a really bad neighbourhood but its close proximity to the CBD and its abundance of funky bars, galleries and restaurants is neatly balanced by a high concentration of government housing that seems to go hand-in-hand with junkies panhandling outside the supermarket, groups of people drinking in the [...]]]></description>
		<wfw:commentRss>http://www.mypentest.com/web-security-car-analogy/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>Seven Web Application Security Myths</title>
		<link>http://www.mypentest.com/web-security-myths/</link>
		<comments>http://www.mypentest.com/web-security-myths/#comments</comments>
		<pubDate>Sun, 04 May 2008 06:35:53 +0000</pubDate>
		<dc:creator>Stuart Moncrieff</dc:creator>
				<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://www.mypentest.com/?p=36</guid>
		<description><![CDATA[
HTTPS will protect your application. Just because a user&#8217;s browser displays a lock icon when they visit your website, doesn&#8217;t mean that your website is secure. HTTP over SSL (HTTPS) only encrypts the traffic between the user and the web server, which prevents snooping of the user&#8217;s traffic. It does not prevent a user sending [...]]]></description>
		<wfw:commentRss>http://www.mypentest.com/web-security-myths/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Akamai &#8211; State of the Internet</title>
		<link>http://www.mypentest.com/akamai-state-of-the-internet/</link>
		<comments>http://www.mypentest.com/akamai-state-of-the-internet/#comments</comments>
		<pubDate>Fri, 04 Apr 2008 02:58:34 +0000</pubDate>
		<dc:creator>Stuart Moncrieff</dc:creator>
				<category><![CDATA[News]]></category>
		<category><![CDATA[Akamai]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[State of the Internet]]></category>

		<guid isPermaLink="false">http://www.mypentest.com/?p=32</guid>
		<description><![CDATA[Akamai, who provide transparent mirroring of web content for high-traffic websites, see a large sample of Internet traffic. They have started to report on some of the trends they see in their traffic patterns (while some not so subtle points about how good they are). Their first report covers Q1 2008 (January &#8211; March). The [...]]]></description>
		<wfw:commentRss>http://www.mypentest.com/akamai-state-of-the-internet/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Opening a laptop security cable with a toilet roll</title>
		<link>http://www.mypentest.com/opening-a-laptop-security-cable-with-a-toilet-roll/</link>
		<comments>http://www.mypentest.com/opening-a-laptop-security-cable-with-a-toilet-roll/#comments</comments>
		<pubDate>Tue, 25 Mar 2008 09:58:39 +0000</pubDate>
		<dc:creator>Stuart Moncrieff</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Kensington]]></category>
		<category><![CDATA[lock picking]]></category>

		<guid isPermaLink="false">http://www.mypentest.com/opening-a-laptop-security-cable-with-a-toilet-roll/</guid>
		<description><![CDATA[
Lock Picked with Toilet Paper Tube
]]></description>
		<wfw:commentRss>http://www.mypentest.com/opening-a-laptop-security-cable-with-a-toilet-roll/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>WebInspect Scan Signatures</title>
		<link>http://www.mypentest.com/webinspect-signatures/</link>
		<comments>http://www.mypentest.com/webinspect-signatures/#comments</comments>
		<pubDate>Mon, 04 Feb 2008 06:03:02 +0000</pubDate>
		<dc:creator>Stuart Moncrieff</dc:creator>
				<category><![CDATA[WebInspect]]></category>

		<guid isPermaLink="false">http://www.mypentest.com/?p=34</guid>
		<description><![CDATA[WebInspect is definitely not a stealthy tool; and that&#8217;s fine, because you shouldn&#8217;t be secretly auditing anyone&#8217;s website. Here are a few of the signs that WebInspect leaves when doing a crawl and audit of a website.
WebInspect Scan Signature: The webinspect scan signature is a request that webinspect sends to the server with the text [...]]]></description>
		<wfw:commentRss>http://www.mypentest.com/webinspect-signatures/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
	</channel>
</rss>

