<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Casaba Security &#187; Security Testing</title>
	<atom:link href="http://www.casabasecurity.com/blog/category/security-testing/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.casabasecurity.com/blog</link>
	<description>Building and breaking software and robots</description>
	<lastBuildDate>Tue, 31 Aug 2010 18:27:09 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>Watcher 1.4.0 released</title>
		<link>http://www.casabasecurity.com/blog/2010/05/watcher-1-4-0-released/</link>
		<comments>http://www.casabasecurity.com/blog/2010/05/watcher-1-4-0-released/#comments</comments>
		<pubDate>Tue, 25 May 2010 19:32:01 +0000</pubDate>
		<dc:creator>Chris Weber</dc:creator>
				<category><![CDATA[Security Testing]]></category>
		<category><![CDATA[Tools]]></category>
		<category><![CDATA[Watcher]]></category>

		<guid isPermaLink="false">http://www.casabasecurity.com/blog/?p=213</guid>
		<description><![CDATA[A new update to the Watcher passive Web-vulnerability scanner has been released. Based on user feedback we&#8217;ve built out the Wiki documentation on Codeplex with more details about the issues identified by each Watcher check. Inside the tool, a reference is now included as a link back to the Wiki. I hope to improve the [...]]]></description>
		<wfw:commentRss>http://www.casabasecurity.com/blog/2010/05/watcher-1-4-0-released/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Watcher 1.3.0 released</title>
		<link>http://www.casabasecurity.com/blog/2010/02/watcher-1-3-0-released/</link>
		<comments>http://www.casabasecurity.com/blog/2010/02/watcher-1-3-0-released/#comments</comments>
		<pubDate>Thu, 25 Feb 2010 17:40:59 +0000</pubDate>
		<dc:creator>Chris Weber</dc:creator>
				<category><![CDATA[Security Testing]]></category>
		<category><![CDATA[Tools]]></category>
		<category><![CDATA[TFS]]></category>
		<category><![CDATA[VIEWSTATE]]></category>
		<category><![CDATA[Watcher]]></category>

		<guid isPermaLink="false">http://www.casabasecurity.com/blog/?p=203</guid>
		<description><![CDATA[A new update to the Watcher passive vulnerability detection and security testing tool has been released. Watcher is an open source addon to the Fiddler Web proxy that aids developers, auditors, and penetration testers in finding Web-application security issues as well as hot-spots for deeper review. Among other things, we&#8217;ve added new checks to identify [...]]]></description>
		<wfw:commentRss>http://www.casabasecurity.com/blog/2010/02/watcher-1-3-0-released/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Microsoft CCI Framework for Deobfuscating .Net binaries. (Part 2)</title>
		<link>http://www.casabasecurity.com/blog/2010/02/microsoft-cci-framework-for-deobfuscating-net-binaries-part-2/</link>
		<comments>http://www.casabasecurity.com/blog/2010/02/microsoft-cci-framework-for-deobfuscating-net-binaries-part-2/#comments</comments>
		<pubDate>Thu, 04 Feb 2010 23:53:14 +0000</pubDate>
		<dc:creator>John Hernandez</dc:creator>
				<category><![CDATA[Debugging]]></category>
		<category><![CDATA[Malware]]></category>
		<category><![CDATA[Reverse Engineering]]></category>
		<category><![CDATA[Security Testing]]></category>
		<category><![CDATA[.NET]]></category>
		<category><![CDATA[Babel]]></category>
		<category><![CDATA[CCI]]></category>
		<category><![CDATA[Deobfuscated]]></category>
		<category><![CDATA[Microsoft CCI]]></category>
		<category><![CDATA[Reversing]]></category>

		<guid isPermaLink="false">http://www.casabasecurity.com/blog/?p=171</guid>
		<description><![CDATA[So yesterday I talked a about using CCI to remove attributes from .Net binaries. Specifically the SupressIldasm attribute. I promised I&#8217;d put up some more code highlighting the framework&#8217;s benefits. So some more detail on the binary I&#8217;m working with. It has been ran through Babel -&#62; Netz -&#62; Babel again. My goals have been [...]]]></description>
		<wfw:commentRss>http://www.casabasecurity.com/blog/2010/02/microsoft-cci-framework-for-deobfuscating-net-binaries-part-2/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Unibomber tool for specialized XSS testing</title>
		<link>http://www.casabasecurity.com/blog/2009/07/unibomber-tool-for-specialized-xss-testing/</link>
		<comments>http://www.casabasecurity.com/blog/2009/07/unibomber-tool-for-specialized-xss-testing/#comments</comments>
		<pubDate>Tue, 28 Jul 2009 01:04:31 +0000</pubDate>
		<dc:creator>Chris Weber</dc:creator>
				<category><![CDATA[Security Testing]]></category>
		<category><![CDATA[Tools]]></category>
		<category><![CDATA[Unicode]]></category>
		<category><![CDATA[XSS]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[John Hernandez has been working hard at Casaba to build a specialized testing tool that automates some of the unique techniques we use to find cross-sites scripting bugs (XSS). At Black Hat I&#039;m planning to demo what we have so far. It automates the testing process greatly, by auto-injecting a canary and ID into each [...]]]></description>
		<wfw:commentRss>http://www.casabasecurity.com/blog/2009/07/unibomber-tool-for-specialized-xss-testing/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Watcher v1.1.0 released</title>
		<link>http://www.casabasecurity.com/blog/2009/04/watcher-v1-1-0-released/</link>
		<comments>http://www.casabasecurity.com/blog/2009/04/watcher-v1-1-0-released/#comments</comments>
		<pubDate>Sun, 12 Apr 2009 16:44:02 +0000</pubDate>
		<dc:creator>Chris Weber</dc:creator>
				<category><![CDATA[Security Testing]]></category>
		<category><![CDATA[Tools]]></category>
		<category><![CDATA[Watcher]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[We&#039;ve made some significant improvements to the Watcher web security and compliance auditing tool in version 1.1.0. Some new checks have been added, bug fixes, and performance improvements. I wanted to point out that Watcher helps not only in testing and auditing Web applications, but it has checks to assess the security strength of the [...]]]></description>
		<wfw:commentRss>http://www.casabasecurity.com/blog/2009/04/watcher-v1-1-0-released/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Eric Lawrence introduces Watcher tool at MIX09 Conference</title>
		<link>http://www.casabasecurity.com/blog/2009/03/eric-lawrence-introduces-watcher-tool-at-mix09-conference/</link>
		<comments>http://www.casabasecurity.com/blog/2009/03/eric-lawrence-introduces-watcher-tool-at-mix09-conference/#comments</comments>
		<pubDate>Sat, 21 Mar 2009 05:23:42 +0000</pubDate>
		<dc:creator>Chris Weber</dc:creator>
				<category><![CDATA[Security Testing]]></category>
		<category><![CDATA[Tools]]></category>
		<category><![CDATA[Watcher]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[I&#039;m happy to say IE8 Security Program Manager and Fiddler author Eric Lawrence announced our Watcher tool at MIX09 today. Check out his talk at http://videos.visitmix.com/MIX09/T54F it&#039;s an eye opener for Web developers &#8211; introducing us to the new features of IE8 while also covering state-of-the-art secure development practices for today&#039;s Web applications. Unfortunately CodePlex [...]]]></description>
		<wfw:commentRss>http://www.casabasecurity.com/blog/2009/03/eric-lawrence-introduces-watcher-tool-at-mix09-conference/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Watcher security tool for web applications</title>
		<link>http://www.casabasecurity.com/blog/2009/03/watcher-security-tool-for-web-applications/</link>
		<comments>http://www.casabasecurity.com/blog/2009/03/watcher-security-tool-for-web-applications/#comments</comments>
		<pubDate>Thu, 12 Mar 2009 04:06:15 +0000</pubDate>
		<dc:creator>Chris Weber</dc:creator>
				<category><![CDATA[Security Testing]]></category>
		<category><![CDATA[Tools]]></category>
		<category><![CDATA[Watcher]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[Watcher is being released under an Open Source license. With over 30 checks in its first release, it helps you find issues in your web-apps fast and effortlessly. Watcher is a Fiddler plugin that passively audits a web application for a variety of security issues. It acts as an assistant to the developer, tester, or [...]]]></description>
		<wfw:commentRss>http://www.casabasecurity.com/blog/2009/03/watcher-security-tool-for-web-applications/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Generating test cases for Unicode-enabled software</title>
		<link>http://www.casabasecurity.com/blog/2008/09/generating-test-cases-for-unicode-enabled-software/</link>
		<comments>http://www.casabasecurity.com/blog/2008/09/generating-test-cases-for-unicode-enabled-software/#comments</comments>
		<pubDate>Wed, 10 Sep 2008 07:00:00 +0000</pubDate>
		<dc:creator>Chris Weber</dc:creator>
				<category><![CDATA[Security Testing]]></category>
		<category><![CDATA[Unicode]]></category>
		<category><![CDATA[test cases]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[When it comes to Unicode implementations, there’s a rich set of test cases to perform. Realizing it is the start. Automating it is the next step. At a high-level Unicode-related security bugs can be categorized into the following root-causes: Canonicalization Interpreting non-shortest form (e.g .UTF-8 encoding trickery) Other decoding issues Absorption (over-consumption) Over-consuming invalid byte [...]]]></description>
		<wfw:commentRss>http://www.casabasecurity.com/blog/2008/09/generating-test-cases-for-unicode-enabled-software/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Unicode formatter characters lead to cross-site scripting in popular browsers</title>
		<link>http://www.casabasecurity.com/blog/2008/09/unicode-formatter-characters-lead-to-cross-site-scripting-in-popular-browsers/</link>
		<comments>http://www.casabasecurity.com/blog/2008/09/unicode-formatter-characters-lead-to-cross-site-scripting-in-popular-browsers/#comments</comments>
		<pubDate>Fri, 05 Sep 2008 21:25:41 +0000</pubDate>
		<dc:creator>Chris Weber</dc:creator>
				<category><![CDATA[Security Testing]]></category>
		<category><![CDATA[Unicode]]></category>
		<category><![CDATA[bug]]></category>
		<category><![CDATA[test cases]]></category>
		<category><![CDATA[vulnerability]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[I&#039;ll be discussing some of the issues recently reported to Opera, Apple, and Mozilla at the 32nd Unicode Conference in San Jose next week. We discovered some issues with the way certain Unicode characters could be leveraged to enable cross-site scripting attacks in popular web browsers (aka User-Agents). These issues involve utilizing Unicode characters in [...]]]></description>
		<wfw:commentRss>http://www.casabasecurity.com/blog/2008/09/unicode-formatter-characters-lead-to-cross-site-scripting-in-popular-browsers/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Cisco Type 7 is as bad as you can possibly get.</title>
		<link>http://www.casabasecurity.com/blog/2008/08/cisco-type-7-is-as-bad-as-you-can-possibly-get/</link>
		<comments>http://www.casabasecurity.com/blog/2008/08/cisco-type-7-is-as-bad-as-you-can-possibly-get/#comments</comments>
		<pubDate>Thu, 07 Aug 2008 22:46:20 +0000</pubDate>
		<dc:creator>Samuel Bucholtz</dc:creator>
				<category><![CDATA[Security Testing]]></category>
		<category><![CDATA[Cisco]]></category>

		<guid isPermaLink="false"></guid>
		<description><![CDATA[I always love learning cool new little features in the software I use. In this case, my coworker Ramsey came across a great Blog (http://blog.ioshints.info) on Cisco IOS and we picked up a new trick for decrypting Type 7 passwords. Cisco IOS has always supported a few encryption mechanisms for local passwords on the device. [...]]]></description>
		<wfw:commentRss>http://www.casabasecurity.com/blog/2008/08/cisco-type-7-is-as-bad-as-you-can-possibly-get/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
