<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>JDS Australia &#187; web security</title>
	<atom:link href="http://www.jds.net.au/tag/web-security/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.jds.net.au</link>
	<description>Expert consulting services with HP Software</description>
	<lastBuildDate>Tue, 17 Jan 2012 22:37:24 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.2.1</generator>
<xhtml:meta xmlns:xhtml="http://www.w3.org/1999/xhtml" name="robots" content="noindex" />
		<item>
		<title>Detect malicious HTML/JavaScript payloads with WebInspect (e.g. ASPROX, Gumblar, Income Iframe)</title>
		<link>http://www.jds.net.au/tech-tips/wi-malicious-payloads-checks/</link>
		<comments>http://www.jds.net.au/tech-tips/wi-malicious-payloads-checks/#comments</comments>
		<pubDate>Fri, 22 May 2009 04:18:51 +0000</pubDate>
		<dc:creator>Linden Darling</dc:creator>
				<category><![CDATA[Tech Tips]]></category>
		<category><![CDATA[web security]]></category>
		<category><![CDATA[WebInspect]]></category>

		<guid isPermaLink="false">http://www.jds.net.au/?p=1624</guid>
		<description><![CDATA[JDS Australia has developed a set of Custom Checks for WebInspect that aim to detect malicious HTML/JavaScript related to automated attacks being carried out across the Internet that infect Web Applications. These malicious payloads connect to domains under the control of the attacker that deliver attacks against known vulnerabilities in commonly installed applications (e.g. Adobe [...]]]></description>
		<wfw:commentRss>http://www.jds.net.au/tech-tips/wi-malicious-payloads-checks/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Harvesting file names with VuGen</title>
		<link>http://www.jds.net.au/tech-tips/harvesting-data-with-vugen/</link>
		<comments>http://www.jds.net.au/tech-tips/harvesting-data-with-vugen/#comments</comments>
		<pubDate>Tue, 13 Jan 2009 02:48:23 +0000</pubDate>
		<dc:creator>Stuart Moncrieff</dc:creator>
				<category><![CDATA[Tech Tips]]></category>
		<category><![CDATA[C]]></category>
		<category><![CDATA[VuGen]]></category>
		<category><![CDATA[web security]]></category>

		<guid isPermaLink="false">http://www.jds.net.au/?p=776</guid>
		<description><![CDATA[VuGen isn&#8217;t just a tool for load testing and application monitoring, it can be used to automate any repetitive task on a web application. In this example, a JDS web security expert had found that a page on a content-managed website allowed anyone to request any file in the database (http://www.example.com/FileViewer/getFile.do?id=1449 ). It was easy [...]]]></description>
		<wfw:commentRss>http://www.jds.net.au/tech-tips/harvesting-data-with-vugen/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>

