Category:OWASP Testing Project

News
The first Draft of the new Testing Guide 2.0 is available below.

Overview
This projects goal is to create a "best practices" penetration testing framework which users can implement in their own organizations and a "low level" penetration testing guide that describes how to find certain issues.

Contributors
Currently there are many people helping out when they can. The Project lead is Eoin Keary. There are still lots of areas to be covered. To contribute please email [mailto:eoin.keary@owasp.org Eoin]

Varun Uppal, Dan Cuthbert, Jeff Williams, Larry Shields, Josh Perrymon (Live CD), Weilin Zhong, Ralph M. Los, Glyn Geoghegan, Javier Fernandez-Sanguino, Mauro Bregolin, Alberto Revelli, Matteo Meucci, Syed Mohamed, Harinath Pudipeddi...........

Volunteers needed
Phase Two call for volunteers Wed Mar 15 12:30:28 EST 2006

Work is underway on the 2nd phase of the testing guide, and we would love to hear from volunteers who could offer their knowledge in creating this phase. If you have knowledge and experience in application testing, and can spare a few hours a week, please do get in [mailto:eoin.keary@owasp.org touch]

Graphics for Labrat ( Live Linux Distro ) If anyone would like to help out with the graphics for the Live Linux Distro please contact OWASP at packetfocus.com This would be a great project for University or even High School students to participate in the security community. The Distro was named "labrat" because it should contain all the tools necessary to perform labratory grade ethical hacking / auditing. And all of the other cool themes have been taken but other Distro's....

Testing Project Phase Two Guide(Current)
This is the working (current) draft of the OWASP Testing Guide. Please login to make changes as you see fit. Changes will be vetted by the OWASP Testing Project team.

OWASP Testing Project Phase Two Guide Table of Contents

Testing Guide Download
This is a copy of the old guide: OWASP Testing Guide

The new guide is more extensive and in wiki format: OWASP_Testing_Guide_Table_of_Contents

Downloads and Materials
You can download project releases from the OWASP download center.

THE OWASP Testing Project Live CD The OWASP testing project is currently implementing an Application security Live CD. LabRat Version 0.8 Alpha is just weeks away from Beta testing*.

The aim of this CD is to have a complete testing suite on one Disk. The CD shall also contain the forthcoming OWASP Testing guide.

The Alpha version contains the following tools/documents:

Application:
 * WebGoat
 * WebScarab
 * Cal9000
 * Wikto/Nikto

Infrastructure:
 * Nmap
 * Hping2
 * TCPDump
 * Yersinia
 * MetaSploit Framework
 * Nessus

Misc:
 * RFID Hacking Tools
 * VOIP Hacking Tools
 * OWASP Guide
 * Footprinting and Information Gathering Tools

The CD is being created in conjunction with Josh Perrrymon at Packetfocus.

He can be contacted on: [mailto:josh.perrymon@packetfocus.com Josh Perrymon]

Also you can contact myself on [mailto:eoin.keary@owasp.org Eoin Keary]
 * If your interested in becoming a Beta tester contact Beta at Packetfocus.

Live CD sponsors:

Newest Release
December 13, 2004 - Phase One Released We are glad to announce that The OWASP Testing Project Phase One has finally been released. This covers the processes involved in testing web applications:


 * The scope of what to test
 * Principles of testing
 * Testing techniques explained
 * The OWASP testing framework explained.

This document is designed to help organizations understand what comprises a testing program, and to help them identify the steps that they need to undertake to build and operate that testing program on their web application

You can now download phase one from the OWASP download centre.

Roadmap
View the OWASP Testing Project Roadmap

News
OWASP Pen Test Checklist in Italian Sun May 22 10:56:39 EDT 2005 I'm glad to announce we have released OWASP Pen Test Checklist in Italian. Thanks to the Italian Chapter, Massimiliano and Mateo for it's great effort to have this document translated. You can download this verion inPDF or Word

Checklist ver 1.17 in Spanish Mon Apr 04 15:37:24 EDT 2005 I'm glad to announce we have released OWASP Pen Test Checklist ver 1.17 in Spanish.Thanks to Pedro, Raul and Rogelio for it's great effort to have this document translated and to Christian by helping out with technical edition. You can download this verion PDF or Word

Project Contributors
Contributors

Feedback and Participation
We hope you find the information in the OWASP Testing project useful. Please contribute back to the project by sending your comments, questions, and suggestions to the OWASP Testing mailing list. Thanks!

To join the OWASP Testing mailing list or view the archives, please visit the subscription page.