OWASP Broken Web Application Project

More documents

Recommendations

Info

Why the Difference?Network Assessment– Mature and stable TCP/IPprotocols– Well defended by networkfirewalls (usually)Web Application Assessment– New technologies areconstantly emerging• Web Services• Mobile platforms• Different databases– New CMS and Webframeworks• Ruby on Rails• Django (Python based)• Node.js– Business logic– Human element
Vulnerable Web Applications• Many unintentional broken web applications • Many intentionally broken web applications– Different frameworks, languages, databases– Some available live, others to be downloaded and installed• Several vendor provided apps exist– Test their product• Training apps such as the OWASP WebGoat project– WebGoat originally written in J2EE now available on otherplatforms– An interactive teaching environment for web applicationsecurity
Page 1 and 2: OWASP Broken Web Application Projec
Page 3: Assessing the assessorNetwork Asses
Page 7 and 8: Bad Web Apps Problems• Some web s
Page 9 and 10: OWASP BWA• “Training Applicatio
Page 11 and 12: Demonstration of VicnumTwo games to
Page 13 and 14: Hacking Vicnum• Are input fields
Page 15 and 16: Cyclone Transfers• Ruby on Rails
Page 17 and 18: Cyclone Review• Did we find all t
Page 19 and 20: Non Technical Issues in WebHacking
Page 21 and 22: Going ForwardNew tools todiscoverNe
Page 23: http://appsecusa.org/2013/More Ques

OWASP Broken Web Application Project

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?