Difference between revisions of "OWASP O2 Platform/WIKI/HomePage"

From OWASP
Jump to: navigation, search
(Created page with ''''What is O2''' O2 is a collection of Open Source modules that help Web Application Security Professionals to maximize their efforts and quickly obtain high visibility into an …')
 
Line 18: Line 18:
 
'''Try O2!'''
 
'''Try O2!'''
  
Download the latest version of the Binaries, Installers or Source Code (from Files (Binaries, Source and Demos))
+
{{:OWASP O2 Platform/WIKI/Download}}
 
+
* Binaries: [http://www.o2-ounceopen.com/files-binaries-source-and-demo/_Bin_O2_Binaries%20%2009-Nov-09.zip _Bin_(O2_Binaries) 09-Nov-09.zip]
+
* Source Code: [http://www.o2-ounceopen.com/files-binaries-source-and-demo/_O2_Installers%2009-Nov-09.zip _SourceCode_O2 09-Nov-09.zip]
+
* MSI Installers: [http://www.o2-ounceopen.com/files-binaries-source-and-demo/_O2_Installers%2009-Nov-09.zip _O2_Installers 09-Nov-09.zip]
+
 
+
Or can install the most commonly used O2 Modulesdirectly from the web (using Click Once) at http://deploy.o2-ounceopen.com/:
+
 
+
* [http://deploy.o2-ounceopen.com/O2_Tool_XRules/O2 Tool - XRules] - O2's eXtended rules environment which allows the execution and edition of complex security analysis workflows
+
* [http://deploy.o2-ounceopen.com/O2_Cmd_SpringMvc O2 Tool - SpringMVC] - Support for Spring's Framework MVC
+
* [http://deploy.o2-ounceopen.com/O2_Tool_RulesManager/ O2 Tool - RulesManager] - Powerful viewer and editor for Ounce's Rules
+
* [http://deploy.o2-ounceopen.com/O2_Tool_FindingsViewer/ O2_Tool_FindingsViewer] - Powerful Filter and Editor for Ozasmt files
+
* [http://deploy.o2-ounceopen.com/O2_Tool_CirViewer/ O2_Tool_CirViewer] - View and create (for .NET) CIR (Common Intermediate Representation) Objects
+
* [http://deploy.o2-ounceopen.com/O2_Tool_SearchEngine/ O2_Tool_SearchEngine] - RegEx text search based GUI
+
* [http://deploy.o2-ounceopen.com/O2_Tool_CSharpScripts/ O2_Tool_CSharpScripts] - Edit and Debug c# Scripts
+
* O2_Tool_DotNetCallbacksMaker- Automatically create Ounce Rules for .NET Callbacks
+
* [http://deploy.o2-ounceopen.com/O2_Tool_FindingsQuery/ O2_Tool_FindingsQuery] - Filter Ozasmt files using LAMDA like queries
+
* [http://deploy.o2-ounceopen.com/O2_Tool_JavaExecution/ O2_Tool_JavaExecution] - Write O2 scripts in Java
+
* [http://deploy.o2-ounceopen.com/O2_Tool_JoinTraces/ O2_Tool_JoinTraces] - Join traces (for example .NET and Web and Web Services layer)
+
* [http://deploy.o2-ounceopen.com/O2_Tool_Python/ O2_Tool_Python] - Write O2 scripts in Python
+
* [http://deploy.o2-ounceopen.com/O2_Tool_O2Scripts/ O2_Tool_O2Scripts] - O2 scripts editor (includes O2 Object Model)
+
* O2_WebInspect(PoC of Integrating Ounce's & WebInspect's assessment data)
+
 
+
 
+
For demos try these
+
 
+
* [http://www.o2-ounceopen.com/files-binaries-source-and-demo/files-for-o2-demostests/O2%20demo%20Pack%20-%2025%20Nov.zip O2 demo Pack 25_11_2008.zip]
+
* [http://www.o2-ounceopen.com/technical-info/2008/12/8/updated-version-of-hacmebank.html Updated version of HacmeBank]
+
* [http://deploy.o2-ounceopen.com/_AppsToScan/ Apps To Scan (directory)]
+
* [http://deploy.o2-ounceopen.com/DemoFiles/ Demo files (directory)]
+
* [http://deploy.o2-ounceopen.com/forStudentVM/ External tool] (usually used when building Test environments or Student VMs)
+

Revision as of 06:20, 18 November 2009

What is O2

O2 is a collection of Open Source modules that help Web Application Security Professionals to maximize their efforts and quickly obtain high visibility into an application's security profile. The objective is to 'Automate Application Security Knowledge and Workflows"

To gain a better understanding of "what is O2?" start with this presentation "What is the OWASP O2 Platform" and then read this presentation "OWASP O2 Platform Modules"

History

Originally O2 (OunceOpen) originated from OunceLabs Advanced Research Team (ART) work, and aims to push to the limit the power of multiple Static Analysis engines.

These tools have been developed by Security Professionals FOR security professionals, and are designed to automate the security consultant's brain

External (to OWASP) O2 website

O2 has a sister (to OWASP) website which contains additional documentation, downloads and O2-related blogs: http://www.o2-ounceopen.com


Try O2!

Try O2!

Download the latest version of the Binaries, Installers or Source Code (from Files (Binaries, Source and Demos))

Or can install the most commonly used O2 Modulesdirectly from the web (using Click Once) at http://deploy.o2-ounceopen.com/:


For demos try these

Code Repository and Bug Tracking System

O2 uses Google Code for its core repository and bugtracking system: http://code.google.com/p/o2platform/



go back to the main OWASP O2 Platform page