<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>vanimpe.eu &#187; Security</title>
	<atom:link href="http://www.vanimpe.eu/blog/category/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.vanimpe.eu/blog</link>
	<description>blog on linux, openbsd, webdesign, ..</description>
	<lastBuildDate>Tue, 25 May 2010 19:43:01 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Parse logfiles for entries from IP lists</title>
		<link>http://www.vanimpe.eu/blog/2010/05/25/parse-logfiles-for-entries-from-ip-lists/</link>
		<comments>http://www.vanimpe.eu/blog/2010/05/25/parse-logfiles-for-entries-from-ip-lists/#comments</comments>
		<pubDate>Tue, 25 May 2010 19:28:22 +0000</pubDate>
		<dc:creator>koen</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[internet]]></category>

		<guid isPermaLink="false">http://www.vanimpe.eu/blog/?p=393</guid>
		<description><![CDATA[I sometimes have to parse log files for different IP addresses and then group them by network owner. This becomes tedious If the number of IP addresses is rather long. The script below can help with automating this manual task.
It reads a log file and looks for a match based on keys in an iplist. [...]]]></description>
		<wfw:commentRss>http://www.vanimpe.eu/blog/2010/05/25/parse-logfiles-for-entries-from-ip-lists/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Phishing notice from Deutsche Bank</title>
		<link>http://www.vanimpe.eu/blog/2010/05/02/phishing-notice-from-deutsche-bank/</link>
		<comments>http://www.vanimpe.eu/blog/2010/05/02/phishing-notice-from-deutsche-bank/#comments</comments>
		<pubDate>Sun, 02 May 2010 16:50:35 +0000</pubDate>
		<dc:creator>koen</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[abuse]]></category>
		<category><![CDATA[internet]]></category>
		<category><![CDATA[mail]]></category>

		<guid isPermaLink="false">http://www.vanimpe.eu/blog/2010/05/02/phishing-notice-from-deutsche-bank/</guid>
		<description><![CDATA[A couple of days back I received an e-mail from Deutsche Bank. I&#8217;m not a customer from DB. About a year ago I applied for some information and I guess my email addresses ended up in their mailinglist.
The mailing warns customers that there is a phishing attack ongoing. According to the mail, once infected, a [...]]]></description>
		<wfw:commentRss>http://www.vanimpe.eu/blog/2010/05/02/phishing-notice-from-deutsche-bank/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>The Complete Guide to XSS</title>
		<link>http://www.vanimpe.eu/blog/2010/03/24/the-complete-guide-to-xss/</link>
		<comments>http://www.vanimpe.eu/blog/2010/03/24/the-complete-guide-to-xss/#comments</comments>
		<pubDate>Wed, 24 Mar 2010 18:59:59 +0000</pubDate>
		<dc:creator>koen</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[internet]]></category>

		<guid isPermaLink="false">http://www.vanimpe.eu/blog/2010/03/24/the-complete-guide-to-xss/</guid>
		<description><![CDATA[There is a good writeup on XSS on Security Override.
]]></description>
		<wfw:commentRss>http://www.vanimpe.eu/blog/2010/03/24/the-complete-guide-to-xss/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>nmap XML to HTML parser</title>
		<link>http://www.vanimpe.eu/blog/2010/03/03/nmap-xml-to-html-parser/</link>
		<comments>http://www.vanimpe.eu/blog/2010/03/03/nmap-xml-to-html-parser/#comments</comments>
		<pubDate>Wed, 03 Mar 2010 22:57:25 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[internet]]></category>

		<guid isPermaLink="false">http://www.vanimpe.eu/blog/?p=382</guid>
		<description><![CDATA[I was recently in need for a parser that would convert Nmap XML output to a HTML file. As far as I could see there was no tool available so I wrote my own. Feel free to use or adjust it.

&#60;!--
Parse nmap XML output
	Koen Van Impe		cudeso.be
	20100303
--&#62;
&#60;html&#62;
&#60;head&#62;&#60;title&#62;nmap xml file to html&#60;/title&#62;&#60;/head&#62;
&#60;body&#62;
	&#60;form method=&#34;POST&#34; enctype=&#34;multipart/form-data&#34; action=&#34;&#60;?php echo $_SERVER[&#34;PHP_SELF&#34;]; [...]]]></description>
		<wfw:commentRss>http://www.vanimpe.eu/blog/2010/03/03/nmap-xml-to-html-parser/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>Snort 3.0 Beta 3 Released</title>
		<link>http://www.vanimpe.eu/blog/2009/04/02/snort-30-beta-3-released/</link>
		<comments>http://www.vanimpe.eu/blog/2009/04/02/snort-30-beta-3-released/#comments</comments>
		<pubDate>Thu, 02 Apr 2009 20:54:08 +0000</pubDate>
		<dc:creator></dc:creator>
				<category><![CDATA[Open Source]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[honeypot]]></category>
		<category><![CDATA[internet]]></category>

		<guid isPermaLink="false">http://www.vanimpe.eu/blog/2009/04/02/snort-30-beta-3-released/</guid>
		<description><![CDATA[An interesting post by Martin Roesch on the new architecture in the beta release of Snort.
]]></description>
		<wfw:commentRss>http://www.vanimpe.eu/blog/2009/04/02/snort-30-beta-3-released/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Sad day for IT Security</title>
		<link>http://www.vanimpe.eu/blog/2009/03/10/sad-day-for-it-security/</link>
		<comments>http://www.vanimpe.eu/blog/2009/03/10/sad-day-for-it-security/#comments</comments>
		<pubDate>Tue, 10 Mar 2009 19:54:15 +0000</pubDate>
		<dc:creator></dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[dns]]></category>
		<category><![CDATA[internet]]></category>

		<guid isPermaLink="false">http://www.vanimpe.eu/blog/2009/03/10/sad-day-for-it-security/</guid>
		<description><![CDATA[It&#8217;s a sad day for IT security when even D. J. Bernstein has to admit that there&#8217;s a flaw in DJBDNS. Luckily the patch that needs to be applied is straightforward and has no known side-effects (at least, not on the DJBDNS servers that I patched).
]]></description>
		<wfw:commentRss>http://www.vanimpe.eu/blog/2009/03/10/sad-day-for-it-security/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>TF-CSIRT 26 &#8211; Riga: Quantitative Cross Comparative Analysis of Tools for Anomaly Detection</title>
		<link>http://www.vanimpe.eu/blog/2009/01/28/tf-csirt-26-riga-quantitative-cross-comparative-analysis-of-tools-for-anomaly-detection/</link>
		<comments>http://www.vanimpe.eu/blog/2009/01/28/tf-csirt-26-riga-quantitative-cross-comparative-analysis-of-tools-for-anomaly-detection/#comments</comments>
		<pubDate>Wed, 28 Jan 2009 20:06:23 +0000</pubDate>
		<dc:creator></dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[conferences]]></category>
		<category><![CDATA[internet]]></category>

		<guid isPermaLink="false">http://www.vanimpe.eu/blog/2009/01/28/tf-csirt-26-riga-quantitative-cross-comparative-analysis-of-tools-for-anomaly-detection/</guid>
		<description><![CDATA[I attended the last joint TF-CSIRT / FIRST meeting in Riga. One of the most interesting talks was by Wayne Routly from Dante. He talked on Quantitative Cross Comparative Analysis of Tools for Anomaly Detection. He gave some very good information on StealthWatch and Netreflex. If you&#8217;re moving Gbs of data then the set of [...]]]></description>
		<wfw:commentRss>http://www.vanimpe.eu/blog/2009/01/28/tf-csirt-26-riga-quantitative-cross-comparative-analysis-of-tools-for-anomaly-detection/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>SSL Blacklist 4.0</title>
		<link>http://www.vanimpe.eu/blog/2009/01/05/ssl-blacklist-40/</link>
		<comments>http://www.vanimpe.eu/blog/2009/01/05/ssl-blacklist-40/#comments</comments>
		<pubDate>Mon, 05 Jan 2009 21:24:12 +0000</pubDate>
		<dc:creator></dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[firefox]]></category>
		<category><![CDATA[internet]]></category>

		<guid isPermaLink="false">http://www.vanimpe.eu/blog/2009/01/05/ssl-blacklist-40/</guid>
		<description><![CDATA[SSL Blacklist is a nice addon for Firefox that has the ability to detect MD5 signed certificates and block access. If you don&#8217;t know what&#8217;s the problem with MD5 signed certificates then enjoy reading this.
]]></description>
		<wfw:commentRss>http://www.vanimpe.eu/blog/2009/01/05/ssl-blacklist-40/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Wiping disks</title>
		<link>http://www.vanimpe.eu/blog/2008/11/24/wiping-disks/</link>
		<comments>http://www.vanimpe.eu/blog/2008/11/24/wiping-disks/#comments</comments>
		<pubDate>Mon, 24 Nov 2008 20:32:36 +0000</pubDate>
		<dc:creator></dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[linux]]></category>

		<guid isPermaLink="false">http://www.vanimpe.eu/blog/2008/11/24/wiping-disks/</guid>
		<description><![CDATA[Recently I needed to wipe a couple of disks because I wanted to sell them. I&#8217;ve played around with shred under Linux (like from a Knoppix live cd) but why go through all this hassle? I encountered Darik&#8217;s Boot and Nuke. Boot from the cd, select the drives and press F10. That&#8217;s all there is.
]]></description>
		<wfw:commentRss>http://www.vanimpe.eu/blog/2008/11/24/wiping-disks/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Active Threat Level Analysis System (ATLAS)</title>
		<link>http://www.vanimpe.eu/blog/2008/10/07/active-threat-level-analysis-system-atlas/</link>
		<comments>http://www.vanimpe.eu/blog/2008/10/07/active-threat-level-analysis-system-atlas/#comments</comments>
		<pubDate>Tue, 07 Oct 2008 19:00:06 +0000</pubDate>
		<dc:creator></dc:creator>
				<category><![CDATA[Security]]></category>
		<category><![CDATA[honeypot]]></category>
		<category><![CDATA[internet]]></category>

		<guid isPermaLink="false">http://www.vanimpe.eu/blog/2008/10/07/active-threat-level-analysis-system-atlas/</guid>
		<description><![CDATA[As incident handlers we always need to look out for sources that report possible malicious activity coming (or going to) our networks. We run a couple of honeypots and have a netflow monitor that alerts us when something is out of the ordinary. Extra sources however are always an extra bonus.
Recently I came across ATLAS [...]]]></description>
		<wfw:commentRss>http://www.vanimpe.eu/blog/2008/10/07/active-threat-level-analysis-system-atlas/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
