OWASP - User contributions [en]

User:Yashartha Chaturvedi

2013-07-24T10:15:21Z

Yashartha Chaturvedi:

Driven by quest in technology - strongly believes that information security is a shared social responsibility. Project Leader [https://www.owasp.org/index.php/OWASP_Mantra_-_Security_Framework OWASP Mantra Security Framework], Team Member [http://matriux.com Matriux] - Debian based Security Distribution

 
[https://www.owasp.org/index.php/OWASP_Mantra_-_Security_Framework OWASP Mantra - Security Framework]
 
[http://matriux.sf.net/ Matriux - The Open Source Security Distribution for Ethical Hackers and Penetration Testers]

OWASP Mantra - Security Framework

2013-01-22T16:49:54Z

Yashartha Chaturvedi:

== Overview ==

[[Image:OWASP Mantra Security Framework.jpg|right|200px|OWASP Mantra Security Framework.jpg]] 

*Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software.
 
*Mantra is lite, flexible, portable and user friendly with a nice graphical user interface. You can carry it in memory cards, flash drives, CD/DVDs, etc. It can be run natively on Linux, Windows and Mac platforms. It can also be installed on to your system within minutes. Mantra is absolutely free of cost and takes no time for you to set up.

'''[http://getmantra.com/download/index.html Download Mantra - Security Framework]''' 

*[http://www.youtube.com/watch?v=GBFxVAM3DLQ Conference Video 1]
*[http://www.youtube.com/watch?v=bKACEDWKeyM Conference Video 2]
*[http://www.youtube.com/watch?v=qpVHWVOPHTk Conference Video 3]

*[http://chmag.in/article/feb2011/mantra-%E2%80%93-free-and-open-source-security-framework Article/Publication ]

 

== Project Goals ==
 
#Create an ecosystem for hackers based on browser
#To bring the attention of security people to the potential of a browser based security platform
#Provide easy to use and portable platform for demonstrating common web based attacks( read training )
#To associate with other security tools/products to make a better environment. Eg:
##It can be a nice addition to security distribution OSs like OWASP Live CD
##It can be used to solve basic levels of CTF contests
##It can associate with projects like DVWA to showcase attacks
##It can bring functions like crawler, SQL injection scanner etc by installing extensions.

 

== Tools ==

 " A sword never kills anybody; it is a tool in the killer's hand." - Lucius Annaeus Seneca 
Mantra is a powerful set of tools to make the attacker's task easier. The beta version of Mantra Security Toolkit contains following tools built onto it. Moreover Mantra follows the guidelines and structure of [http://firecat.fr/ FireCAT ] which makes it even more accessible. You can also always suggest any tools/ scripts that you would like see in the next release. 

[[Image:OWASP Mantra Security Framework in Ubuntu 11.png|thumb|300px|right|OWASP Mantra Security Framework running under Ubuntu 11 environment]]
 
[[Image:OWASP Mantra Security Framework in MAC Environment.png|thumb|300px|right|OWASP Mantra Security Framework running in MAC Environment]]
 
[[Image:OWASP Mantra Security Framework Screenshot.jpeg|thumb|300px|right|OWASP Mantra Security Framework Screenshot : under Windows 7 environment]]

+'''Information Gathering'''

- ''Flagfox'' 
- ''JSView'' 
- ''PassiveRecon'' 
- ''[http://wappalyzer.com Wappalyzer]'' 
- ''View Dependencies'' 
- ''Link Sidebar''

+'''Editors'''

- ''JSView'' 
- ''Firebug''

+'''Network Utilities'''

- ''FireFTP'' 
- ''DNS Cache'' 
- ''SQLite Manager'' 
- ''HTTP Fox'' 
- ''FireSSH''

+'''Miscellaneous'''

- ''Greasemonkey'' 
- ''Greasefire'' 
- ''CacheToggle'' 
- ''URL Flipper'' 
- ''Event Spy'' 
- ''Stacked Inspector'' 
- ''Scriptish'' 
- ''Session Manager'' 
- ''FireEncrypter'' 

+'''Application Auditing'''

- ''Hackbar'' 
- ''RESTClient'' 
- ''Tamper Data'' 
- ''Live HTTP Headers'' 
- ''RefControl'' 
- ''User Agent Switcher'' 
- ''Web Developer'' 
- ''DOM Inspector'' 
- ''Inspect This'' 
- ''Form Fox'' 
- ''SQL Inject Me'' 
- ''XSS Me'' 
- ''Cookies Manager+'' 
- ''Firecookie'' 
- ''Autofill Forms'' 
- ''Cookie Monster'' 
- ''Fireforce'' 
- ''Groundspeed'' 
- ''Http Requester'' 
- ''Modify Headers'' 
- ''Poster'' 
- ''Ref Spoof'' 
- ''SeleniumExpertSeleniumIDE'' 
- ''SeleniumIDE'' 
- ''NoRedirect'' 
- ''Websecurify'' 
- ''Ra.2''

+'''Proxy'''

- ''FoxyProxy'' 
- ''Http Fox'' ''
- ''Proxy Tool''

== News ==

 
[http://www.computerweekly.com/blogs/open-source-insider/2011/10/free-software-testing-on-usb-for-students-to-web-developers-with-mantra.html Computer Weekly Article] 
[http://getmantra.com/forums/Thread-owasp-mantra-c0c0n-11-and-appseclatam-11-release OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release] 
[http://www.ekoparty.org/2011/workshops/owasp-mantra-security-framework.php Mantra at Ekoparty Security Conference] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Mantra at OWASP LatamTour - Buenos Aires, Argentina] 
Getting secure with Mantra: An open source penetration testing kit - 1. [http://www.computerworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss Computer World] 2. [http://www.cio.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ CIO] 3. [http://www.techworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ Tech World] 4. [http://www.cso.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss CSO] 
[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 Searchsecurity Screencast] 
[http://getmantra.com/forums/Thread-mantra-in-matriux-upcoming-release-leaked Mantra in Matriux Security Distribution] 
[http://getmantra.com/forums/Thread-mantra-in-backtrack-5 Mantra in Backtrack 5 - Penetration Testing Distribution] 
[http://www.facebook.com/photo.php?fbid=185544081485201&set=a.170788249627451.33033.170787489627527&type=1&ref=nf Mantra – Free and Open Source Security Framework' - published in India's first hacking magazine ClubHack Mag] 
[http://clubhack.com/2010/speakers/ ClubHACK 2010 Mantra release] 
[http://secpedia.net/wiki/OWASP_Mantra_Security_Framework OWASP Mantra page on Secpedia, the information security encyclopedia]

== Contributors ==

 
"It is purpose that created us, purpose that connects us, purpose that pulls us, that guides us, that drives us, that binds us, it is purpose that defines us." - Agent Smith 
'''Project Leaders''' 
[[User:Abhi_M_Balakrishnan|Abhi M Balakrishnan]] 
[[User:Yashartha_Chaturvedi|Yashartha Chaturvedi]] 
 

'''Other Members''' 
[[User:Gokul_C_Gopinath|Gokul C Gopinath]] 
[[User:Maximiliano_Soler|Maximiliano Soler]] 
[[User:Niraj T Mohite|Niraj Mohite]] 
[[User:Rahul Babu R|Rahul Babu R]] 
Gopu C Gopinath 
Thomas Mackenzie 

== Download ==

 
" All things are difficult before they are easy." - Thomas Fuller 
'''OWASP Mantra Security Toolkit - Beta 0.92 code named Janus''' 

{|
|'''Platform'''

|'''Links'''

|-
|'''Linux 32 bit'''
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Janus%20-%200.92%20Beta/OWASP%20Mantra%20Janus%20Linux%2032.tar.gz/download Mirror 1] [http://code.google.com/p/getmantra/downloads/detail?name=OWASP%20Mantra%20Janus%20Linux%2032.tar.gz Mirror 2] [http://burnbit.com/download/233734/OWASP_Mantra_Janus_Linux_32_tar_gz Torrent]
|-
|'''Linux 64 bit'''
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Janus%20-%200.92%20Beta/OWASP%20Mantra%20Janus%20Linux%2064.tar.gz/download Mirror 1] [http://code.google.com/p/getmantra/downloads/detail?name=OWASP%20Mantra%20Janus%20Linux%2064.tar.gz Mirror 2] [http://burnbit.com/download/233735/OWASP_Mantra_Janus_Linux_64_tar_gz Torrent]
|-
|'''Windows'''
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Janus%20-%200.92%20Beta/OWASP%20Mantra%20Janus.exe/download Mirror 1] [http://code.google.com/p/getmantra/downloads/detail?name=OWASP%20Mantra%20Janus.exe Mirror 2] [http://burnbit.com/download/233648/OWASP_Mantra_Janus_exe Torrent]
|-
|'''Macintosh'''
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Janus%20-%200.92%20Beta/OWASP%20Mantra%20Janus.mpkg.zip/download Mirror 1] [http://code.google.com/p/getmantra/downloads/detail?name=OWASP%20Mantra%20Janus.mpkg.zip Mirror 2] [http://burnbit.com/download/233736/OWASP_Mantra_Janus_mpkg_zip Torrent]
|-
|'''Source'''
|[http://code.google.com/p/getmantra/downloads/detail?name=OWASP%20Mantra%20Janus.mpkg.zip Mirror 1]
|}

 
''Above given download links are only for Mantra in English- for other languages please check official website at'' http://www.getmantra.com/download/mantra-security-toolkit.html

[[Category:OWASP_Download]]

== Project About ==

{{:Projects/OWASP Mantra - Security Framework | Project About}}

== Resources ==
 

'''Project Pamphlets''' 

[http://www.owasp.org/images/e/e4/OWASP_Mantra-An_Introduction.pdf Project Pamphlet 1] 

'''Project Presentations''' 

[http://www.owasp.org/index.php/File:OWASP_Mantra-An_Introduction.pptx Project Presentation 1] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Project Presentation 2] 

'''Text Tutorials''' 

[http://getmantra.com/forums/Thread-introducing-passiverecon-by-justin-morehouse Introducing PassiveRecon by Justin Morehouse] 
[http://getmantra.com/forums/Thread-introducing-groundspeed-by-felipe Introducing Groundspeed by Felipe] 
[http://getmantra.com/forums/Thread-introducing-link-sidebar-by-varun-n Introducing Link Sidebar by Varun N] 
[http://getmantra.com/forums/Thread-introducing-proxytool-by-robert-rade Introducing ProxyTool by Robert Rade] 
[http://getmantra.com/forums/Thread-introducing-httpfox-by-martin-theimer Introducing HttpFox by Martin Theimer] 
[http://getmantra.com/forums/Thread-how-to-make-your-own-search-bar-item How to make your own search bar item] 
[http://getmantra.com/forums/Thread-how-to-use-moc-crawler How to use MoC crawler] 
[http://getmantra.com/forums/Thread-switching-between-languages-and-locales Switching between languages and locales] 
[http://getmantra.com/forums/Thread-running-mantra-and-firefox-together Running Mantra and Firefox together] 
[http://getmantra.com/forums/Thread-login-form-bypass-using-mantra-security-toolkit Login Form Bypass using Mantra Security Toolkit] 
[http://getmantra.com/forums/Thread-advanced-sql-injection-tutorial-complete-website-rooting Advanced SQL Injection Tutorial - Complete website rooting] 
[http://getmantra.com/forums/Thread-manual-crawling Manual Crawling] 
[http://getmantra.com/forums/Thread-introducing-flagfox Introducing Flagfox] 

'''Video Tutorials''' 

[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 SearchSecurity Screencast] 
ClubHACK 2010 - [http://www.youtube.com/watch?v=GBFxVAM3DLQ 1] [http://www.youtube.com/watch?v=bKACEDWKeyM 2] [http://www.youtube.com/watch?v=qpVHWVOPHTk 3] 
[http://www.youtube.com/watch?v=yTbB42sR208 Broken Authentication Demonstration] 
[http://www.youtube.com/watch?v=o1WVx6eYE-M Broken Session Demonstration] 
[http://www.youtube.com/watch?v=vvPeskadF-s Insecure Direct Object References Demonstration] 
[http://www.youtube.com/watch?v=NK3S-nwiGwA Cross Site Scripting Demonstration] 
[http://www.youtube.com/watch?v=p94ssETMbQ0& Introduction + How to use Mantra Security Toolkit] 
[http://www.youtube.com/watch?v=fxHlthnVJpA Introduction to Mantra (Arabic)] 
[http://www.youtube.com/watch?v=exyUAGseifI Introducing FoxyProxy (Arabic)] 
[http://www.youtube.com/watch?v=vFcY584Wmw0 OWASP Mantra - URL Shortener Script SQL Injection Vulnerability] 
[http://www.youtube.com/watch?v=CRJkGZlV6Vk OWASP Mantra and LAMP Security CTF 6] 
[http://www.youtube.com/watch?v=aPk5vCqh-2k OWASP Mantra and Who Wants to be a Millionaire] 
[http://www.youtube.com/watch?v=0lPz24Z7Q_4 OWASP Mantra - One File CMS - Failure to Restrict URL Access]

==== Links ====
 
[http://www.getmantra.com/index.html Main Website] 
[http://www.getmantra.com/forums/ Discussion Forums] 
[http://www.facebook.com/getmantra/ Facebook Page] 
[http://getmantra.tumblr.com/ Tumblr] 
[http://twitter.com/getmantra Twitter] 
[http://vimeo.com/getmantra Vimeo] 
[http://sourceforge.net/projects/getmantra/ Sourceforge] 
[http://code.google.com/p/getmantra/ Google Code] 
[http://www.youtube.com/getmantra Youtube]
[http://mantralooks.blogspot.in/ Artworks]
[http://mantragallery.blogspot.com/ Wallpapers]

__NOTOC__ <headertabs />

[[Category:OWASP_Tool]] [[Category:OWASP_Alpha_Quality_Tool]] [[Category:OWASP_Project|Mantra - Security Framework]]
[[Category:OWASP Download]]{{OWASP Breakers}}

Projects/OWASP Mantra - Security Framework/Releases/OWASP Mantra Janus - Beta 0.92

2013-01-22T16:43:18Z

Yashartha Chaturvedi: Created page with "{{Template: <includeonly>{{{1}}}</includeonly><noinclude>Release About</noinclude> | project_name = OWASP Mantra - Security Framework | project_home_page = OWASP Mantra - Se..."

{{Template: <includeonly>{{{1}}}</includeonly><noinclude>Release About</noinclude>

| project_name = OWASP Mantra - Security Framework

| project_home_page = OWASP Mantra - Security Framework

| release_name = OWASP Mantra Janus - Beta 0.92

| release_date = 22 January 2013

| release_description =
Sixth public beta release of OWASP Mantra Security Toolkit - Beta 0.92 code named [http://blog.getmantra.com/2013/01/owasp-mantra-janus-092.html Janus] 

| release_license =
[http://www.gnu.org/copyleft/fdl.html GNU Free Documentation 1.2 for documents] & [http://www.gnu.org/licenses/gpl-3.0.html GPL v3 for source code]

| release_download_link = http://www.getmantra.com/download.html

| leader_name1 = Abhi M BalaKrishnan
| leader_email1 = abhi@getmantra.com
| leader_username1 = Abhi_M_Balakrishnan

| contributor_name1 = Yashartha Chaturvedi
| contributor_email1 = yashartha@getmantra.com
| contributor_username1 = Yashartha_Chaturvedi

| release_notes = http://blog.getmantra.com/2013/01/owasp-mantra-janus-092.html

| links_url1 =
| links_name1 =
}}

Projects/OWASP Mantra - Security Framework/Releases/Current

2013-01-22T16:41:28Z

Yashartha Chaturvedi: Redirected page to Projects/OWASP Mantra - Security Framework/Releases/Mantra Security Toolkit - 0.92

#REDIRECT [[Projects/OWASP Mantra - Security Framework/Releases/Mantra_Security_Toolkit_-_0.92]]

Projects/OWASP Mantra - Security Framework/Releases/Mantra Security Toolkit - 0.92

2013-01-22T16:39:07Z

OWASP Mantra - Security Framework

2013-01-22T16:33:09Z

Yashartha Chaturvedi:

== Overview ==

[[Image:OWASP Mantra Security Framework.jpg|right|200px|OWASP Mantra Security Framework.jpg]] 

*Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software.
 
*Mantra is lite, flexible, portable and user friendly with a nice graphical user interface. You can carry it in memory cards, flash drives, CD/DVDs, etc. It can be run natively on Linux, Windows and Mac platforms. It can also be installed on to your system within minutes. Mantra is absolutely free of cost and takes no time for you to set up.

'''[http://getmantra.com/download/index.html Download Mantra - Security Framework]''' 

*[http://www.youtube.com/watch?v=GBFxVAM3DLQ Conference Video 1]
*[http://www.youtube.com/watch?v=bKACEDWKeyM Conference Video 2]
*[http://www.youtube.com/watch?v=qpVHWVOPHTk Conference Video 3]

*[http://chmag.in/article/feb2011/mantra-%E2%80%93-free-and-open-source-security-framework Article/Publication ]

 

== Project Goals ==
 
#Create an ecosystem for hackers based on browser
#To bring the attention of security people to the potential of a browser based security platform
#Provide easy to use and portable platform for demonstrating common web based attacks( read training )
#To associate with other security tools/products to make a better environment. Eg:
##It can be a nice addition to security distribution OSs like OWASP Live CD
##It can be used to solve basic levels of CTF contests
##It can associate with projects like DVWA to showcase attacks
##It can bring functions like crawler, SQL injection scanner etc by installing extensions.

 

== Tools ==

 " A sword never kills anybody; it is a tool in the killer's hand." - Lucius Annaeus Seneca 
Mantra is a powerful set of tools to make the attacker's task easier. The beta version of Mantra Security Toolkit contains following tools built onto it. Moreover Mantra follows the guidelines and structure of [http://firecat.fr/ FireCAT ] which makes it even more accessible. You can also always suggest any tools/ scripts that you would like see in the next release. 

[[Image:OWASP Mantra Security Framework in Ubuntu 11.png|thumb|300px|right|OWASP Mantra Security Framework running under Ubuntu 11 environment]]
 
[[Image:OWASP Mantra Security Framework in MAC Environment.png|thumb|300px|right|OWASP Mantra Security Framework running in MAC Environment]]
 
[[Image:OWASP Mantra Security Framework Screenshot.jpeg|thumb|300px|right|OWASP Mantra Security Framework Screenshot : under Windows 7 environment]]

+'''Information Gathering'''

- ''Flagfox'' 
- ''JSView'' 
- ''PassiveRecon'' 
- ''[http://wappalyzer.com Wappalyzer]'' 
- ''View Dependencies'' 
- ''Link Sidebar''

+'''Editors'''

- ''JSView'' 
- ''Firebug''

+'''Network Utilities'''

- ''FireFTP'' 
- ''DNS Cache'' 
- ''SQLite Manager'' 
- ''HTTP Fox'' 
- ''FireSSH''

+'''Miscellaneous'''

- ''Greasemonkey'' 
- ''Greasefire'' 
- ''CacheToggle'' 
- ''URL Flipper'' 
- ''Event Spy'' 
- ''Stacked Inspector'' 
- ''Scriptish'' 
- ''Session Manager'' 
- ''FireEncrypter'' 

+'''Application Auditing'''

- ''Hackbar'' 
- ''RESTClient'' 
- ''Tamper Data'' 
- ''Live HTTP Headers'' 
- ''RefControl'' 
- ''User Agent Switcher'' 
- ''Web Developer'' 
- ''DOM Inspector'' 
- ''Inspect This'' 
- ''Form Fox'' 
- ''SQL Inject Me'' 
- ''XSS Me'' 
- ''Cookies Manager+'' 
- ''Firecookie'' 
- ''Autofill Forms'' 
- ''Cookie Monster'' 
- ''Fireforce'' 
- ''Groundspeed'' 
- ''Http Requester'' 
- ''Modify Headers'' 
- ''Poster'' 
- ''Ref Spoof'' 
- ''SeleniumExpertSeleniumIDE'' 
- ''SeleniumIDE'' 
- ''NoRedirect'' 
- ''Websecurify'' 
- ''Ra.2''

+'''Proxy'''

- ''FoxyProxy'' 
- ''Http Fox'' ''
- ''Proxy Tool''

== News ==

 
[http://www.computerweekly.com/blogs/open-source-insider/2011/10/free-software-testing-on-usb-for-students-to-web-developers-with-mantra.html Computer Weekly Article] 
[http://getmantra.com/forums/Thread-owasp-mantra-c0c0n-11-and-appseclatam-11-release OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release] 
[http://www.ekoparty.org/2011/workshops/owasp-mantra-security-framework.php Mantra at Ekoparty Security Conference] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Mantra at OWASP LatamTour - Buenos Aires, Argentina] 
Getting secure with Mantra: An open source penetration testing kit - 1. [http://www.computerworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss Computer World] 2. [http://www.cio.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ CIO] 3. [http://www.techworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ Tech World] 4. [http://www.cso.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss CSO] 
[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 Searchsecurity Screencast] 
[http://getmantra.com/forums/Thread-mantra-in-matriux-upcoming-release-leaked Mantra in Matriux Security Distribution] 
[http://getmantra.com/forums/Thread-mantra-in-backtrack-5 Mantra in Backtrack 5 - Penetration Testing Distribution] 
[http://www.facebook.com/photo.php?fbid=185544081485201&set=a.170788249627451.33033.170787489627527&type=1&ref=nf Mantra – Free and Open Source Security Framework' - published in India's first hacking magazine ClubHack Mag] 
[http://clubhack.com/2010/speakers/ ClubHACK 2010 Mantra release] 
[http://secpedia.net/wiki/OWASP_Mantra_Security_Framework OWASP Mantra page on Secpedia, the information security encyclopedia]

== Contributors ==

 
"It is purpose that created us, purpose that connects us, purpose that pulls us, that guides us, that drives us, that binds us, it is purpose that defines us." - Agent Smith 
'''Project Leaders''' 
[[User:Abhi_M_Balakrishnan|Abhi M Balakrishnan]] 
[[User:Yashartha_Chaturvedi|Yashartha Chaturvedi]] 
 

'''Other Members''' 
[[User:Gokul_C_Gopinath|Gokul C Gopinath]] 
[[User:Maximiliano_Soler|Maximiliano Soler]] 
[[User:Niraj T Mohite|Niraj Mohite]] 
[[User:Rahul Babu R|Rahul Babu R]] 
Gopu C Gopinath 
Thomas Mackenzie 

== Download ==

 
" All things are difficult before they are easy." - Thomas Fuller 
'''OWASP Mantra Security Toolkit - Beta 0.92 code named Janus''' 

{|
|'''Platform'''
|'''Details'''
|'''Links'''
|-
|'''Linux 32 bit'''
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Janus%20-%200.92%20Beta/OWASP%20Mantra%20Janus%20Linux%2032.tar.gz/download Mirror 1] [http://code.google.com/p/getmantra/downloads/detail?name=OWASP%20Mantra%20Janus%20Linux%2032.tar.gz Mirror 2] [http://burnbit.com/download/233734/OWASP_Mantra_Janus_Linux_32_tar_gz Torrent]
|-
|'''Linux 64 bit'''
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Janus%20-%200.92%20Beta/OWASP%20Mantra%20Janus%20Linux%2064.tar.gz/download Mirror 1] [http://code.google.com/p/getmantra/downloads/detail?name=OWASP%20Mantra%20Janus%20Linux%2064.tar.gz Mirror 2] [http://burnbit.com/download/233735/OWASP_Mantra_Janus_Linux_64_tar_gz Torrent]
|-
|'''Windows'''
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Janus%20-%200.92%20Beta/OWASP%20Mantra%20Janus.exe/download Mirror 1] [http://code.google.com/p/getmantra/downloads/detail?name=OWASP%20Mantra%20Janus.exe Mirror 2] [http://burnbit.com/download/233648/OWASP_Mantra_Janus_exe Torrent]
|-
|'''Macintosh'''
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Janus%20-%200.92%20Beta/OWASP%20Mantra%20Janus.mpkg.zip/download Mirror 1] [http://code.google.com/p/getmantra/downloads/detail?name=OWASP%20Mantra%20Janus.mpkg.zip Mirror 2] [http://burnbit.com/download/233736/OWASP_Mantra_Janus_mpkg_zip Torrent]
|-
|'''Source'''
|[http://code.google.com/p/getmantra/downloads/detail?name=OWASP%20Mantra%20Janus.mpkg.zip Mirror 1]
|}

 
''Above given download links are only for Mantra in English- for other languages please check official website at'' http://www.getmantra.com/download/mantra-security-toolkit.html

[[Category:OWASP_Download]]

== Project About ==

{{:Projects/OWASP Mantra - Security Framework | Project About}}

== Resources ==
 

'''Project Pamphlets''' 

[http://www.owasp.org/images/e/e4/OWASP_Mantra-An_Introduction.pdf Project Pamphlet 1] 

'''Project Presentations''' 

[http://www.owasp.org/index.php/File:OWASP_Mantra-An_Introduction.pptx Project Presentation 1] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Project Presentation 2] 

'''Text Tutorials''' 

[http://getmantra.com/forums/Thread-introducing-passiverecon-by-justin-morehouse Introducing PassiveRecon by Justin Morehouse] 
[http://getmantra.com/forums/Thread-introducing-groundspeed-by-felipe Introducing Groundspeed by Felipe] 
[http://getmantra.com/forums/Thread-introducing-link-sidebar-by-varun-n Introducing Link Sidebar by Varun N] 
[http://getmantra.com/forums/Thread-introducing-proxytool-by-robert-rade Introducing ProxyTool by Robert Rade] 
[http://getmantra.com/forums/Thread-introducing-httpfox-by-martin-theimer Introducing HttpFox by Martin Theimer] 
[http://getmantra.com/forums/Thread-how-to-make-your-own-search-bar-item How to make your own search bar item] 
[http://getmantra.com/forums/Thread-how-to-use-moc-crawler How to use MoC crawler] 
[http://getmantra.com/forums/Thread-switching-between-languages-and-locales Switching between languages and locales] 
[http://getmantra.com/forums/Thread-running-mantra-and-firefox-together Running Mantra and Firefox together] 
[http://getmantra.com/forums/Thread-login-form-bypass-using-mantra-security-toolkit Login Form Bypass using Mantra Security Toolkit] 
[http://getmantra.com/forums/Thread-advanced-sql-injection-tutorial-complete-website-rooting Advanced SQL Injection Tutorial - Complete website rooting] 
[http://getmantra.com/forums/Thread-manual-crawling Manual Crawling] 
[http://getmantra.com/forums/Thread-introducing-flagfox Introducing Flagfox] 

'''Video Tutorials''' 

[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 SearchSecurity Screencast] 
ClubHACK 2010 - [http://www.youtube.com/watch?v=GBFxVAM3DLQ 1] [http://www.youtube.com/watch?v=bKACEDWKeyM 2] [http://www.youtube.com/watch?v=qpVHWVOPHTk 3] 
[http://www.youtube.com/watch?v=yTbB42sR208 Broken Authentication Demonstration] 
[http://www.youtube.com/watch?v=o1WVx6eYE-M Broken Session Demonstration] 
[http://www.youtube.com/watch?v=vvPeskadF-s Insecure Direct Object References Demonstration] 
[http://www.youtube.com/watch?v=NK3S-nwiGwA Cross Site Scripting Demonstration] 
[http://www.youtube.com/watch?v=p94ssETMbQ0& Introduction + How to use Mantra Security Toolkit] 
[http://www.youtube.com/watch?v=fxHlthnVJpA Introduction to Mantra (Arabic)] 
[http://www.youtube.com/watch?v=exyUAGseifI Introducing FoxyProxy (Arabic)] 
[http://www.youtube.com/watch?v=vFcY584Wmw0 OWASP Mantra - URL Shortener Script SQL Injection Vulnerability] 
[http://www.youtube.com/watch?v=CRJkGZlV6Vk OWASP Mantra and LAMP Security CTF 6] 
[http://www.youtube.com/watch?v=aPk5vCqh-2k OWASP Mantra and Who Wants to be a Millionaire] 
[http://www.youtube.com/watch?v=0lPz24Z7Q_4 OWASP Mantra - One File CMS - Failure to Restrict URL Access]

==== Links ====
 
[http://www.getmantra.com/index.html Main Website] 
[http://www.getmantra.com/forums/ Discussion Forums] 
[http://www.facebook.com/getmantra/ Facebook Page] 
[http://getmantra.tumblr.com/ Tumblr] 
[http://twitter.com/getmantra Twitter] 
[http://vimeo.com/getmantra Vimeo] 
[http://sourceforge.net/projects/getmantra/ Sourceforge] 
[http://code.google.com/p/getmantra/ Google Code] 
[http://www.youtube.com/getmantra Youtube]
[http://mantralooks.blogspot.in/ Artworks]
[http://mantragallery.blogspot.com/ Wallpapers]

__NOTOC__ <headertabs />

[[Category:OWASP_Tool]] [[Category:OWASP_Alpha_Quality_Tool]] [[Category:OWASP_Project|Mantra - Security Framework]]
[[Category:OWASP Download]]{{OWASP Breakers}}

User:Yashartha Chaturvedi

2012-08-28T04:09:59Z

Yashartha Chaturvedi:

Driven by quest in technology - strongly believes that information security is a shared social responsibility. Project Leader [https://www.owasp.org/index.php/OWASP_Mantra_-_Security_Framework OWASP Mantra Security Framework], Team Member [http://matriux.com Matriux] - Debian based Security Distribution , Information Security Consultant at [http://slybulwark.com Slybulwark]

 
[https://www.owasp.org/index.php/OWASP_Mantra_-_Security_Framework OWASP Mantra - Security Framework]
 
[http://matriux.sf.net/ Matriux - The Open Source Security Distribution for Ethical Hackers and Penetration Testers]
 
[http://www.is-ra.org/index.html Information Security Research Association]

OWASP Mantra - Security Framework

2012-07-04T15:41:26Z

Yashartha Chaturvedi:

[[File:OWASP_Logo_Web.jpg|600px|center|link=http://www.owasp.org/index.php/OWASP_InfoSec_Conference_2012]]

== Overview ==

[[Image:OWASP Mantra Security Framework.jpg|right|200px|OWASP Mantra Security Framework.jpg]] 

*Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software.
 
*Mantra is lite, flexible, portable and user friendly with a nice graphical user interface. You can carry it in memory cards, flash drives, CD/DVDs, etc. It can be run natively on Linux, Windows and Mac platforms. It can also be installed on to your system within minutes. Mantra is absolutely free of cost and takes no time for you to set up.

'''[http://getmantra.com/download/index.html Download Mantra - Security Framework]''' 

*[http://www.youtube.com/watch?v=GBFxVAM3DLQ Conference Video 1]
*[http://www.youtube.com/watch?v=bKACEDWKeyM Conference Video 2]
*[http://www.youtube.com/watch?v=qpVHWVOPHTk Conference Video 3]

*[http://chmag.in/article/feb2011/mantra-%E2%80%93-free-and-open-source-security-framework Article/Publication ]

 

== Project Goals ==
 
#Create an ecosystem for hackers based on browser
#To bring the attention of security people to the potential of a browser based security platform
#Provide easy to use and portable platform for demonstrating common web based attacks( read training )
#To associate with other security tools/products to make a better environment. Eg:
##It can be a nice addition to security distribution OSs like OWASP Live CD
##It can be used to solve basic levels of CTF contests
##It can associate with projects like DVWA to showcase attacks
##It can bring functions like crawler, SQL injection scanner etc by installing extensions.

 

== Tools ==

 " A sword never kills anybody; it is a tool in the killer's hand." - Lucius Annaeus Seneca 
Mantra is a powerful set of tools to make the attacker's task easier. The beta version of Mantra Security Toolkit contains following tools built onto it. Moreover Mantra follows the guidelines and structure of [http://firecat.fr/ FireCAT ] which makes it even more accessible. You can also always suggest any tools/ scripts that you would like see in the next release. 

[[Image:OWASP Mantra Security Framework in Ubuntu 11.png|thumb|300px|right|OWASP Mantra Security Framework running under Ubuntu 11 environment]]
 
[[Image:OWASP Mantra Security Framework in MAC Environment.png|thumb|300px|right|OWASP Mantra Security Framework running in MAC Environment]]
 
[[Image:OWASP Mantra Security Framework Screenshot.jpeg|thumb|300px|right|OWASP Mantra Security Framework Screenshot : under Windows 7 environment]]

+'''Information Gathering'''

- ''Flagfox'' 
- ''JSView'' 
- ''PassiveRecon'' 
- ''Wappalyzer'' 
- ''View Dependencies'' 
- ''Link Sidebar''

+'''Editors'''

- ''JSView'' 
- ''Firebug''

+'''Network Utilities'''

- ''FireFTP'' 
- ''DNS Cache'' 
- ''SQLite Manager'' 
- ''HTTP Fox'' 
- ''FireSSH''

+'''Miscellaneous'''

- ''Greasemonkey'' 
- ''Greasefire'' 
- ''CacheToggle'' 
- ''URL Flipper'' 
- ''Event Spy'' 
- ''Stacked Inspector'' 
- ''Scriptish'' 
- ''Session Manager'' 
- ''FireEncrypter'' 

+'''Application Auditing'''

- ''Hackbar'' 
- ''RESTClient'' 
- ''Tamper Data'' 
- ''Live HTTP Headers'' 
- ''RefControl'' 
- ''User Agent Switcher'' 
- ''Web Developer'' 
- ''DOM Inspector'' 
- ''Inspect This'' 
- ''Form Fox'' 
- ''SQL Inject Me'' 
- ''XSS Me'' 
- ''Cookies Manager+'' 
- ''Firecookie'' 
- ''Autofill Forms'' 
- ''Cookie Monster'' 
- ''Fireforce'' 
- ''Groundspeed'' 
- ''Http Requester'' 
- ''Modify Headers'' 
- ''Poster'' 
- ''Ref Spoof'' 
- ''SeleniumExpertSeleniumIDE'' 
- ''SeleniumIDE'' 
- ''NoRedirect'' 
- ''Websecurify'' 
- ''Ra.2''

+'''Proxy'''

- ''FoxyProxy'' 
- ''Http Fox'' ''
- ''Proxy Tool''

== News ==

 
[http://www.computerweekly.com/blogs/open-source-insider/2011/10/free-software-testing-on-usb-for-students-to-web-developers-with-mantra.html Computer Weekly Article] 
[http://getmantra.com/forums/Thread-owasp-mantra-c0c0n-11-and-appseclatam-11-release OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release] 
[http://www.ekoparty.org/2011/workshops/owasp-mantra-security-framework.php Mantra at Ekoparty Security Conference] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Mantra at OWASP LatamTour - Buenos Aires, Argentina] 
Getting secure with Mantra: An open source penetration testing kit - 1. [http://www.computerworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss Computer World] 2. [http://www.cio.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ CIO] 3. [http://www.techworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ Tech World] 4. [http://www.cso.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss CSO] 
[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 Searchsecurity Screencast] 
[http://getmantra.com/forums/Thread-mantra-in-matriux-upcoming-release-leaked Mantra in Matriux Security Distribution] 
[http://getmantra.com/forums/Thread-mantra-in-backtrack-5 Mantra in Backtrack 5 - Penetration Testing Distribution] 
[http://www.facebook.com/photo.php?fbid=185544081485201&set=a.170788249627451.33033.170787489627527&type=1&ref=nf Mantra – Free and Open Source Security Framework' - published in India's first hacking magazine ClubHack Mag] 
[http://clubhack.com/2010/speakers/ ClubHACK 2010 Mantra release] 
[http://secpedia.net/wiki/OWASP_Mantra_Security_Framework OWASP Mantra page on Secpedia, the information security encyclopedia]

== Contributors ==

 
"It is purpose that created us, purpose that connects us, purpose that pulls us, that guides us, that drives us, that binds us, it is purpose that defines us." - Agent Smith 
'''Project Leaders''' 
[[User:Abhi_M_Balakrishnan|Abhi M Balakrishnan]] 
[[User:Yashartha_Chaturvedi|Yashartha Chaturvedi]] 
[[User:Gokul_C_Gopinath|Gokul C Gopinath]] 

'''Other Members''' 
[[User:Maximiliano_Soler|Maximiliano Soler]] 
Gopu C Gopinath 
Thomas Mackenzie 
Niraj Mohite 
Rahul Babu R 

== Download ==

 
" All things are difficult before they are easy." - Thomas Fuller 
'''OWASP Mantra Security Toolkit - Beta 0.91 code named Lexicon''' 

{|
|'''Platform'''
|'''Details'''
|'''Links'''
|-
|'''Linux 32 bit'''
|MD5: 54784b658a0ad08ad6f7cfd18ea0a3d7
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/en-US/Mantra%20Lexicon%20Lin32%20EN.tar.bz2/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Lin32%20EN.tar.bz2 Mirror 2] [http://burnbit.com/torrent/200586/Mantra_Lexicon_Lin32_EN_tar_bz2 Torrent]
|-
|'''Linux 64 bit'''
|MD5: e4ffc6686c58e9dc3a38e89fb63e6b63
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/en-US/Mantra%20Lexicon%20Lin64%20EN.tar.bz2/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Lin64%20EN.tar.bz2 Mirror 2] [http://burnbit.com/torrent/200520/Mantra_Lexicon_Lin64_EN_tar_bz2 Torrent]
|-
|'''Windows'''
|MD5: db7a6f4a15667965c59296663e58a343
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/en-US/Mantra%20Lexicon%20Win%20EN.exe/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Win%20EN.exe Mirror 2] [http://burnbit.com/torrent/200339/Mantra_Lexicon_Win_EN_exe Torrent]
|-
|'''Macintosh'''
|MD5: 9c69fe858fc9709156d54676072d9281
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/en-US/Mantra%20Lexicon%20Mac%20EN.zip/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Mac%20EN.zip Mirror 2] [http://burnbit.com/torrent/200487/Mantra_Lexicon_Mac_EN_zip Torrent]
|-
|'''Source'''
|MD5: 7814e494504c4227411adb34b8fe2227
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/Mantra%20Lexicon%20Source.7z/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Source.7z Mirror 2] [http://burnbit.com/torrent/200588/Mantra_Lexicon_Source_7z Torrent]
|}

 
''Above given download links are only for Mantra in English- for other languages please check official website at'' http://www.getmantra.com/download/mantra-security-toolkit.html

[[Category:OWASP_Download]]

== Project About ==

{{:Projects/OWASP Mantra - Security Framework | Project About}}

== Resources ==
 

'''Project Pamphlets''' 

[http://www.owasp.org/images/e/e4/OWASP_Mantra-An_Introduction.pdf Project Pamphlet 1] 

'''Project Presentations''' 

[http://www.owasp.org/index.php/File:OWASP_Mantra-An_Introduction.pptx Project Presentation 1] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Project Presentation 2] 

'''Text Tutorials''' 

[http://getmantra.com/forums/Thread-introducing-passiverecon-by-justin-morehouse Introducing PassiveRecon by Justin Morehouse] 
[http://getmantra.com/forums/Thread-introducing-groundspeed-by-felipe Introducing Groundspeed by Felipe] 
[http://getmantra.com/forums/Thread-introducing-link-sidebar-by-varun-n Introducing Link Sidebar by Varun N] 
[http://getmantra.com/forums/Thread-introducing-proxytool-by-robert-rade Introducing ProxyTool by Robert Rade] 
[http://getmantra.com/forums/Thread-introducing-httpfox-by-martin-theimer Introducing HttpFox by Martin Theimer] 
[http://getmantra.com/forums/Thread-how-to-make-your-own-search-bar-item How to make your own search bar item] 
[http://getmantra.com/forums/Thread-how-to-use-moc-crawler How to use MoC crawler] 
[http://getmantra.com/forums/Thread-switching-between-languages-and-locales Switching between languages and locales] 
[http://getmantra.com/forums/Thread-running-mantra-and-firefox-together Running Mantra and Firefox together] 
[http://getmantra.com/forums/Thread-login-form-bypass-using-mantra-security-toolkit Login Form Bypass using Mantra Security Toolkit] 
[http://getmantra.com/forums/Thread-advanced-sql-injection-tutorial-complete-website-rooting Advanced SQL Injection Tutorial - Complete website rooting] 
[http://getmantra.com/forums/Thread-manual-crawling Manual Crawling] 
[http://getmantra.com/forums/Thread-introducing-flagfox Introducing Flagfox] 

'''Video Tutorials''' 

[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 SearchSecurity Screencast] 
ClubHACK 2010 - [http://www.youtube.com/watch?v=GBFxVAM3DLQ 1] [http://www.youtube.com/watch?v=bKACEDWKeyM 2] [http://www.youtube.com/watch?v=qpVHWVOPHTk 3] 
[http://www.youtube.com/watch?v=yTbB42sR208 Broken Authentication Demonstration] 
[http://www.youtube.com/watch?v=o1WVx6eYE-M Broken Session Demonstration] 
[http://www.youtube.com/watch?v=vvPeskadF-s Insecure Direct Object References Demonstration] 
[http://www.youtube.com/watch?v=NK3S-nwiGwA Cross Site Scripting Demonstration] 
[http://www.youtube.com/watch?v=p94ssETMbQ0& Introduction + How to use Mantra Security Toolkit] 
[http://www.youtube.com/watch?v=fxHlthnVJpA Introduction to Mantra (Arabic)] 
[http://www.youtube.com/watch?v=exyUAGseifI Introducing FoxyProxy (Arabic)] 
[http://www.youtube.com/watch?v=vFcY584Wmw0 OWASP Mantra - URL Shortener Script SQL Injection Vulnerability] 
[http://www.youtube.com/watch?v=CRJkGZlV6Vk OWASP Mantra and LAMP Security CTF 6] 
[http://www.youtube.com/watch?v=aPk5vCqh-2k OWASP Mantra and Who Wants to be a Millionaire] 
[http://www.youtube.com/watch?v=0lPz24Z7Q_4 OWASP Mantra - One File CMS - Failure to Restrict URL Access]

==== Links ====
 
[http://www.getmantra.com/index.html Main Website] 
[http://www.getmantra.com/forums/ Discussion Forums] 
[http://www.facebook.com/getmantra/ Facebook Page] 
[http://getmantra.tumblr.com/ Tumblr] 
[http://twitter.com/getmantra Twitter] 
[http://vimeo.com/getmantra Vimeo] 
[http://sourceforge.net/projects/getmantra/ Sourceforge] 
[http://code.google.com/p/getmantra/ Google Code] 
[http://www.youtube.com/getmantra Youtube]
[http://mantralooks.blogspot.in/ Artworks]
[http://mantragallery.blogspot.com/ Wallpapers]

__NOTOC__ <headertabs />

[[Category:OWASP_Tool]] [[Category:OWASP_Alpha_Quality_Tool]] [[Category:OWASP_Project|Mantra - Security Framework]]
[[Category:OWASP Download]]{{OWASP Breakers}}

OWASP Mantra - Security Framework

2012-05-20T15:32:45Z

Yashartha Chaturvedi:

== Overview ==

[[Image:OWASP Mantra Security Framework.jpg|right|200px|OWASP Mantra Security Framework.jpg]] 

*Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software.
 
*Mantra is lite, flexible, portable and user friendly with a nice graphical user interface. You can carry it in memory cards, flash drives, CD/DVDs, etc. It can be run natively on Linux, Windows and Mac platforms. It can also be installed on to your system within minutes. Mantra is absolutely free of cost and takes no time for you to set up.

'''[http://getmantra.com/download/index.html Download Mantra - Security Framework]''' 

*[http://www.youtube.com/watch?v=GBFxVAM3DLQ Conference Video 1]
*[http://www.youtube.com/watch?v=bKACEDWKeyM Conference Video 2]
*[http://www.youtube.com/watch?v=qpVHWVOPHTk Conference Video 3]

*[http://chmag.in/article/feb2011/mantra-%E2%80%93-free-and-open-source-security-framework Article/Publication ]

 

== Project Goals ==
 
#Create an ecosystem for hackers based on browser
#To bring the attention of security people to the potential of a browser based security platform
#Provide easy to use and portable platform for demonstrating common web based attacks( read training )
#To associate with other security tools/products to make a better environment. Eg:
##It can be a nice addition to security distribution OSs like OWASP Live CD
##It can be used to solve basic levels of CTF contests
##It can associate with projects like DVWA to showcase attacks
##It can bring functions like crawler, SQL injection scanner etc by installing extensions.

 

== Tools ==

 " A sword never kills anybody; it is a tool in the killer's hand." - Lucius Annaeus Seneca 
Mantra is a powerful set of tools to make the attacker's task easier. The beta version of Mantra Security Toolkit contains following tools built onto it. Moreover Mantra follows the guidelines and structure of [http://firecat.fr/ FireCAT ] which makes it even more accessible. You can also always suggest any tools/ scripts that you would like see in the next release. 

[[Image:OWASP Mantra Security Framework in Ubuntu 11.png|thumb|300px|right|OWASP Mantra Security Framework running under Ubuntu 11 environment]]
 
[[Image:OWASP Mantra Security Framework in MAC Environment.png|thumb|300px|right|OWASP Mantra Security Framework running in MAC Environment]]
 
[[Image:OWASP Mantra Security Framework Screenshot.jpeg|thumb|300px|right|OWASP Mantra Security Framework Screenshot : under Windows 7 environment]]

+'''Information Gathering'''

- ''Flagfox'' 
- ''JSView'' 
- ''PassiveRecon'' 
- ''Wappalyzer'' 
- ''View Dependencies'' 
- ''Link Sidebar''

+'''Editors'''

- ''JSView'' 
- ''Firebug''

+'''Network Utilities'''

- ''FireFTP'' 
- ''DNS Cache'' 
- ''SQLite Manager'' 
- ''HTTP Fox'' 
- ''FireSSH''

+'''Miscellaneous'''

- ''Greasemonkey'' 
- ''Greasefire'' 
- ''CacheToggle'' 
- ''URL Flipper'' 
- ''Event Spy'' 
- ''Stacked Inspector'' 
- ''Scriptish'' 
- ''Session Manager'' 
- ''FireEncrypter'' 

+'''Application Auditing'''

- ''Hackbar'' 
- ''RESTClient'' 
- ''Tamper Data'' 
- ''Live HTTP Headers'' 
- ''RefControl'' 
- ''User Agent Switcher'' 
- ''Web Developer'' 
- ''DOM Inspector'' 
- ''Inspect This'' 
- ''Form Fox'' 
- ''SQL Inject Me'' 
- ''XSS Me'' 
- ''Cookies Manager+'' 
- ''Firecookie'' 
- ''Autofill Forms'' 
- ''Cookie Monster'' 
- ''Fireforce'' 
- ''Groundspeed'' 
- ''Http Requester'' 
- ''Modify Headers'' 
- ''Poster'' 
- ''Ref Spoof'' 
- ''SeleniumExpertSeleniumIDE'' 
- ''SeleniumIDE'' 
- ''NoRedirect'' 
- ''Websecurify'' 
- ''Ra.2''

+'''Proxy'''

- ''FoxyProxy'' 
- ''Http Fox'' ''
- ''Proxy Tool''

== News ==

 
[http://www.computerweekly.com/blogs/open-source-insider/2011/10/free-software-testing-on-usb-for-students-to-web-developers-with-mantra.html Computer Weekly Article] 
[http://getmantra.com/forums/Thread-owasp-mantra-c0c0n-11-and-appseclatam-11-release OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release] 
[http://www.ekoparty.org/2011/workshops/owasp-mantra-security-framework.php Mantra at Ekoparty Security Conference] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Mantra at OWASP LatamTour - Buenos Aires, Argentina] 
Getting secure with Mantra: An open source penetration testing kit - 1. [http://www.computerworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss Computer World] 2. [http://www.cio.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ CIO] 3. [http://www.techworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ Tech World] 4. [http://www.cso.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss CSO] 
[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 Searchsecurity Screencast] 
[http://getmantra.com/forums/Thread-mantra-in-matriux-upcoming-release-leaked Mantra in Matriux Security Distribution] 
[http://getmantra.com/forums/Thread-mantra-in-backtrack-5 Mantra in Backtrack 5 - Penetration Testing Distribution] 
[http://www.facebook.com/photo.php?fbid=185544081485201&set=a.170788249627451.33033.170787489627527&type=1&ref=nf Mantra – Free and Open Source Security Framework' - published in India's first hacking magazine ClubHack Mag] 
[http://clubhack.com/2010/speakers/ ClubHACK 2010 Mantra release]

== Contributors ==

 
"It is purpose that created us, purpose that connects us, purpose that pulls us, that guides us, that drives us, that binds us, it is purpose that defines us." - Agent Smith 
'''Project Leaders''' 
[[User:Abhi_M_Balakrishnan|Abhi M Balakrishnan]] 
[[User:Yashartha_Chaturvedi|Yashartha Chaturvedi]] 
[[User:Gokul_C_Gopinath|Gokul C Gopinath]] 

'''Other Members''' 
[[User:Maximiliano_Soler|Maximiliano Soler]] 
Gopu C Gopinath 
Thomas Mackenzie 
Niraj Mohite 
Rahul Babu R 

== Download ==

 
" All things are difficult before they are easy." - Thomas Fuller 
'''OWASP Mantra Security Toolkit - Beta 0.91 code named Lexicon''' 

{|
|'''Platform'''
|'''Details'''
|'''Links'''
|-
|'''Linux 32 bit'''
|MD5: 54784b658a0ad08ad6f7cfd18ea0a3d7
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/en-US/Mantra%20Lexicon%20Lin32%20EN.tar.bz2/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Lin32%20EN.tar.bz2 Mirror 2] [http://burnbit.com/torrent/200586/Mantra_Lexicon_Lin32_EN_tar_bz2 Torrent]
|-
|'''Linux 64 bit'''
|MD5: e4ffc6686c58e9dc3a38e89fb63e6b63
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/en-US/Mantra%20Lexicon%20Lin64%20EN.tar.bz2/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Lin64%20EN.tar.bz2 Mirror 2] [http://burnbit.com/torrent/200520/Mantra_Lexicon_Lin64_EN_tar_bz2 Torrent]
|-
|'''Windows'''
|MD5: db7a6f4a15667965c59296663e58a343
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/en-US/Mantra%20Lexicon%20Win%20EN.exe/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Win%20EN.exe Mirror 2] [http://burnbit.com/torrent/200339/Mantra_Lexicon_Win_EN_exe Torrent]
|-
|'''Macintosh'''
|MD5: 9c69fe858fc9709156d54676072d9281
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/en-US/Mantra%20Lexicon%20Mac%20EN.zip/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Mac%20EN.zip Mirror 2] [http://burnbit.com/torrent/200487/Mantra_Lexicon_Mac_EN_zip Torrent]
|-
|'''Source'''
|MD5: 7814e494504c4227411adb34b8fe2227
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/Mantra%20Lexicon%20Source.7z/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Source.7z Mirror 2] [http://burnbit.com/torrent/200588/Mantra_Lexicon_Source_7z Torrent]
|}

 
''Above given download links are only for Mantra in English- for other languages please check official website at'' http://www.getmantra.com/download/mantra-security-toolkit.html

[[Category:OWASP_Download]]

== Project About ==

{{:Projects/OWASP Mantra - Security Framework | Project About}}

== Resources ==
 

'''Project Pamphlets''' 

[http://www.owasp.org/images/e/e4/OWASP_Mantra-An_Introduction.pdf Project Pamphlet 1] 

'''Project Presentations''' 

[http://www.owasp.org/index.php/File:OWASP_Mantra-An_Introduction.pptx Project Presentation 1] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Project Presentation 2] 

'''Text Tutorials''' 

[http://getmantra.com/forums/Thread-introducing-passiverecon-by-justin-morehouse Introducing PassiveRecon by Justin Morehouse] 
[http://getmantra.com/forums/Thread-introducing-groundspeed-by-felipe Introducing Groundspeed by Felipe] 
[http://getmantra.com/forums/Thread-introducing-link-sidebar-by-varun-n Introducing Link Sidebar by Varun N] 
[http://getmantra.com/forums/Thread-introducing-proxytool-by-robert-rade Introducing ProxyTool by Robert Rade] 
[http://getmantra.com/forums/Thread-introducing-httpfox-by-martin-theimer Introducing HttpFox by Martin Theimer] 
[http://getmantra.com/forums/Thread-how-to-make-your-own-search-bar-item How to make your own search bar item] 
[http://getmantra.com/forums/Thread-how-to-use-moc-crawler How to use MoC crawler] 
[http://getmantra.com/forums/Thread-switching-between-languages-and-locales Switching between languages and locales] 
[http://getmantra.com/forums/Thread-running-mantra-and-firefox-together Running Mantra and Firefox together] 
[http://getmantra.com/forums/Thread-login-form-bypass-using-mantra-security-toolkit Login Form Bypass using Mantra Security Toolkit] 
[http://getmantra.com/forums/Thread-advanced-sql-injection-tutorial-complete-website-rooting Advanced SQL Injection Tutorial - Complete website rooting] 
[http://getmantra.com/forums/Thread-manual-crawling Manual Crawling] 
[http://getmantra.com/forums/Thread-introducing-flagfox Introducing Flagfox] 

'''Video Tutorials''' 

[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 SearchSecurity Screencast] 
ClubHACK 2010 - [http://www.youtube.com/watch?v=GBFxVAM3DLQ 1] [http://www.youtube.com/watch?v=bKACEDWKeyM 2] [http://www.youtube.com/watch?v=qpVHWVOPHTk 3] 
[http://www.youtube.com/watch?v=yTbB42sR208 Broken Authentication Demonstration] 
[http://www.youtube.com/watch?v=o1WVx6eYE-M Broken Session Demonstration] 
[http://www.youtube.com/watch?v=vvPeskadF-s Insecure Direct Object References Demonstration] 
[http://www.youtube.com/watch?v=NK3S-nwiGwA Cross Site Scripting Demonstration] 
[http://www.youtube.com/watch?v=p94ssETMbQ0& Introduction + How to use Mantra Security Toolkit] 
[http://www.youtube.com/watch?v=fxHlthnVJpA Introduction to Mantra (Arabic)] 
[http://www.youtube.com/watch?v=exyUAGseifI Introducing FoxyProxy (Arabic)]
[http://www.youtube.com/watch?v=vFcY584Wmw0 OWASP Mantra - URL Shortener Script SQL Injection Vulnerability]
[http://www.youtube.com/watch?v=CRJkGZlV6Vk OWASP Mantra and LAMP Security CTF 6]
[http://www.youtube.com/watch?v=aPk5vCqh-2k OWASP Mantra and Who Wants to be a Millionaire]
[http://www.youtube.com/watch?v=0lPz24Z7Q_4 OWASP Mantra - One File CMS - Failure to Restrict URL Access]

==== Links ====
 
[http://www.getmantra.com/index.html Main Website] 
[http://www.getmantra.com/forums/ Discussion Forums] 
[http://www.facebook.com/getmantra/ Facebook Page] 
[http://getmantra.tumblr.com/ Tumblr] 
[http://twitter.com/getmantra Twitter] 
[http://vimeo.com/getmantra Vimeo] 
[http://sourceforge.net/projects/getmantra/ Sourceforge] 
[http://code.google.com/p/getmantra/ Google Code] 
[http://www.youtube.com/getmantra Youtube]
[http://mantralooks.blogspot.in/ Artworks]
[http://mantragallery.blogspot.com/ Wallpapers]

__NOTOC__ <headertabs />

[[Category:OWASP_Tool]] [[Category:OWASP_Alpha_Quality_Tool]] [[Category:OWASP_Project|Mantra - Security Framework]]
[[Category:OWASP Download]]

OWASP Mantra - Security Framework

2012-05-20T15:27:23Z

Yashartha Chaturvedi:

== Overview ==

[[Image:OWASP Mantra Security Framework.jpg|right|200px|OWASP Mantra Security Framework.jpg]] 

*Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software.
 
*Mantra is lite, flexible, portable and user friendly with a nice graphical user interface. You can carry it in memory cards, flash drives, CD/DVDs, etc. It can be run natively on Linux, Windows and Mac platforms. It can also be installed on to your system within minutes. Mantra is absolutely free of cost and takes no time for you to set up.

'''[http://getmantra.com/download/index.html Download Mantra - Security Framework]''' 

*[http://www.youtube.com/watch?v=GBFxVAM3DLQ Conference Video 1]
*[http://www.youtube.com/watch?v=bKACEDWKeyM Conference Video 2]
*[http://www.youtube.com/watch?v=qpVHWVOPHTk Conference Video 3]

*[http://chmag.in/article/feb2011/mantra-%E2%80%93-free-and-open-source-security-framework Article/Publication ]

 

== Project Goals ==
 
#Create an ecosystem for hackers based on browser
#To bring the attention of security people to the potential of a browser based security platform
#Provide easy to use and portable platform for demonstrating common web based attacks( read training )
#To associate with other security tools/products to make a better environment. Eg:
##It can be a nice addition to security distribution OSs like OWASP Live CD
##It can be used to solve basic levels of CTF contests
##It can associate with projects like DVWA to showcase attacks
##It can bring functions like crawler, SQL injection scanner etc by installing extensions.

 

== Tools ==

 " A sword never kills anybody; it is a tool in the killer's hand." - Lucius Annaeus Seneca 
Mantra is a powerful set of tools to make the attacker's task easier. The beta version of Mantra Security Toolkit contains following tools built onto it. Moreover Mantra follows the guidelines and structure of [http://firecat.fr/ FireCAT ] which makes it even more accessible. You can also always suggest any tools/ scripts that you would like see in the next release. 

[[Image:OWASP Mantra Security Framework in Ubuntu 11.png|thumb|300px|right|OWASP Mantra Security Framework running under Ubuntu 11 environment]]
 
[[Image:OWASP Mantra Security Framework in MAC Environment.png|thumb|300px|right|OWASP Mantra Security Framework running in MAC Environment]]
 
[[Image:OWASP Mantra Security Framework Screenshot.jpeg|thumb|300px|right|OWASP Mantra Security Framework Screenshot : under Windows 7 environment]]

+'''Information Gathering'''

- ''Flagfox'' 
- ''JSView'' 
- ''PassiveRecon'' 
- ''Wappalyzer'' 
- ''View Dependencies'' 
- ''Link Sidebar''

+'''Editors'''

- ''JSView'' 
- ''Firebug''

+'''Network Utilities'''

- ''FireFTP'' 
- ''DNS Cache'' 
- ''SQLite Manager'' 
- ''HTTP Fox'' 
- ''FireSSH''

+'''Miscellaneous'''

- ''Greasemonkey'' 
- ''Greasefire'' 
- ''CacheToggle'' 
- ''URL Flipper'' 
- ''Event Spy'' 
- ''Stacked Inspector'' 
- ''Scriptish'' 
- ''Session Manager'' 
- ''FireEncrypter'' 

+'''Application Auditing'''

- ''Hackbar'' 
- ''RESTClient'' 
- ''Tamper Data'' 
- ''Live HTTP Headers'' 
- ''RefControl'' 
- ''User Agent Switcher'' 
- ''Web Developer'' 
- ''DOM Inspector'' 
- ''Inspect This'' 
- ''Form Fox'' 
- ''SQL Inject Me'' 
- ''XSS Me'' 
- ''Cookies Manager+'' 
- ''Firecookie'' 
- ''Autofill Forms'' 
- ''Cookie Monster'' 
- ''Fireforce'' 
- ''Groundspeed'' 
- ''Http Requester'' 
- ''Modify Headers'' 
- ''Poster'' 
- ''Ref Spoof'' 
- ''SeleniumExpertSeleniumIDE'' 
- ''SeleniumIDE'' 
- ''NoRedirect'' 
- ''Websecurify'' 
- ''Ra.2''

+'''Proxy'''

- ''FoxyProxy'' 
- ''Http Fox'' ''
- ''Proxy Tool''

== News ==

 
[http://www.computerweekly.com/blogs/open-source-insider/2011/10/free-software-testing-on-usb-for-students-to-web-developers-with-mantra.html Computer Weekly Article] 
[http://getmantra.com/forums/Thread-owasp-mantra-c0c0n-11-and-appseclatam-11-release OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release] 
[http://www.ekoparty.org/2011/workshops/owasp-mantra-security-framework.php Mantra at Ekoparty Security Conference] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Mantra at OWASP LatamTour - Buenos Aires, Argentina] 
Getting secure with Mantra: An open source penetration testing kit - 1. [http://www.computerworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss Computer World] 2. [http://www.cio.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ CIO] 3. [http://www.techworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ Tech World] 4. [http://www.cso.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss CSO] 
[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 Searchsecurity Screencast] 
[http://getmantra.com/forums/Thread-mantra-in-matriux-upcoming-release-leaked Mantra in Matriux Security Distribution] 
[http://getmantra.com/forums/Thread-mantra-in-backtrack-5 Mantra in Backtrack 5 - Penetration Testing Distribution] 
[http://www.facebook.com/photo.php?fbid=185544081485201&set=a.170788249627451.33033.170787489627527&type=1&ref=nf Mantra – Free and Open Source Security Framework' - published in India's first hacking magazine ClubHack Mag] 
[http://clubhack.com/2010/speakers/ ClubHACK 2010 Mantra release]

== Contributors ==

 
"It is purpose that created us, purpose that connects us, purpose that pulls us, that guides us, that drives us, that binds us, it is purpose that defines us." - Agent Smith 
'''Project Leaders''' 
[[User:Abhi_M_Balakrishnan|Abhi M Balakrishnan]] 
[[User:Yashartha_Chaturvedi|Yashartha Chaturvedi]] 
[[User:Gokul_C_Gopinath|Gokul C Gopinath]] 

'''Other Members''' 
[[User:Maximiliano_Soler|Maximiliano Soler]] 
Gopu C Gopinath 
Thomas Mackenzie 
Niraj Mohite 
Rahul Babu R 

== Download ==

 
" All things are difficult before they are easy." - Thomas Fuller 
'''OWASP Mantra Security Toolkit - Beta 0.91 code named Lexicon''' 

{|
|'''Platform'''
|'''Details'''
|'''Links'''
|-
|'''Linux 32 bit'''
|MD5: 54784b658a0ad08ad6f7cfd18ea0a3d7
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/en-US/Mantra%20Lexicon%20Lin32%20EN.tar.bz2/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Lin32%20EN.tar.bz2 Mirror 2] [http://burnbit.com/torrent/200586/Mantra_Lexicon_Lin32_EN_tar_bz2 Torrent]
|-
|'''Linux 64 bit'''
|MD5: e4ffc6686c58e9dc3a38e89fb63e6b63
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/en-US/Mantra%20Lexicon%20Lin64%20EN.tar.bz2/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Lin64%20EN.tar.bz2 Mirror 2] [http://burnbit.com/torrent/200520/Mantra_Lexicon_Lin64_EN_tar_bz2 Torrent]
|-
|'''Windows'''
|MD5: db7a6f4a15667965c59296663e58a343
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/en-US/Mantra%20Lexicon%20Win%20EN.exe/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Win%20EN.exe Mirror 2] [http://burnbit.com/torrent/200339/Mantra_Lexicon_Win_EN_exe Torrent]
|-
|'''Macintosh'''
|MD5: 9c69fe858fc9709156d54676072d9281
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/en-US/Mantra%20Lexicon%20Mac%20EN.zip/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Mac%20EN.zip Mirror 2] [http://burnbit.com/torrent/200487/Mantra_Lexicon_Mac_EN_zip Torrent]
|-
|'''Source'''
|MD5: 7814e494504c4227411adb34b8fe2227
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/Mantra%20Lexicon%20Source.7z/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Source.7z Mirror 2] [http://burnbit.com/torrent/200588/Mantra_Lexicon_Source_7z Torrent]
|}

 
''Above given download links are only for Mantra in English- for other languages please check official website at'' http://www.getmantra.com/download/mantra-security-toolkit.html

[[Category:OWASP_Download]]

== Project About ==

{{:Projects/OWASP Mantra - Security Framework | Project About}}

== Resources ==
 

'''Project Pamphlets''' 

[http://www.owasp.org/images/e/e4/OWASP_Mantra-An_Introduction.pdf Project Pamphlet 1] 

'''Project Presentations''' 

[http://www.owasp.org/index.php/File:OWASP_Mantra-An_Introduction.pptx Project Presentation 1] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Project Presentation 2] 

'''Text Tutorials''' 

[http://getmantra.com/forums/Thread-introducing-passiverecon-by-justin-morehouse Introducing PassiveRecon by Justin Morehouse] 
[http://getmantra.com/forums/Thread-introducing-groundspeed-by-felipe Introducing Groundspeed by Felipe] 
[http://getmantra.com/forums/Thread-introducing-link-sidebar-by-varun-n Introducing Link Sidebar by Varun N] 
[http://getmantra.com/forums/Thread-introducing-proxytool-by-robert-rade Introducing ProxyTool by Robert Rade] 
[http://getmantra.com/forums/Thread-introducing-httpfox-by-martin-theimer Introducing HttpFox by Martin Theimer] 
[http://getmantra.com/forums/Thread-how-to-make-your-own-search-bar-item How to make your own search bar item] 
[http://getmantra.com/forums/Thread-how-to-use-moc-crawler How to use MoC crawler] 
[http://getmantra.com/forums/Thread-switching-between-languages-and-locales Switching between languages and locales] 
[http://getmantra.com/forums/Thread-running-mantra-and-firefox-together Running Mantra and Firefox together] 
[http://getmantra.com/forums/Thread-login-form-bypass-using-mantra-security-toolkit Login Form Bypass using Mantra Security Toolkit] 
[http://getmantra.com/forums/Thread-advanced-sql-injection-tutorial-complete-website-rooting Advanced SQL Injection Tutorial - Complete website rooting] 
[http://getmantra.com/forums/Thread-manual-crawling Manual Crawling] 
[http://getmantra.com/forums/Thread-introducing-flagfox Introducing Flagfox] 

'''Video Tutorials''' 

[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 SearchSecurity Screencast] 
ClubHACK 2010 - [http://www.youtube.com/watch?v=GBFxVAM3DLQ 1] [http://www.youtube.com/watch?v=bKACEDWKeyM 2] [http://www.youtube.com/watch?v=qpVHWVOPHTk 3] 
[http://www.youtube.com/watch?v=yTbB42sR208 Broken Authentication Demonstration] 
[http://www.youtube.com/watch?v=o1WVx6eYE-M Broken Session Demonstration] 
[http://www.youtube.com/watch?v=vvPeskadF-s Insecure Direct Object References Demonstration] 
[http://www.youtube.com/watch?v=NK3S-nwiGwA Cross Site Scripting Demonstration] 
[http://www.youtube.com/watch?v=p94ssETMbQ0& Introduction + How to use Mantra Security Toolkit] 
[http://www.youtube.com/watch?v=fxHlthnVJpA Introduction to Mantra (Arabic)] 
[http://www.youtube.com/watch?v=exyUAGseifI Introducing FoxyProxy (Arabic)]
[http://www.youtube.com/watch?v=vFcY584Wmw0 OWASP Mantra - URL Shortener Script SQL Injection Vulnerability]
[http://www.youtube.com/watch?v=CRJkGZlV6Vk OWASP Mantra and LAMP Security CTF 6]
[http://www.youtube.com/watch?v=aPk5vCqh-2k OWASP Mantra and Who Wants to be a Millionaire]
[http://www.youtube.com/watch?v=0lPz24Z7Q_4 OWASP Mantra - One File CMS - Failure to Restrict URL Access]

==== Links ====
 
[http://www.getmantra.com/index.html Main Website] 
[http://www.getmantra.com/forums/ Discussion Forums] 
[http://www.facebook.com/getmantra/ Facebook Page] 
[http://getmantra.tumblr.com/ Tumblr] 
[http://twitter.com/getmantra Twitter] 
[http://vimeo.com/getmantra Vimeo] 
[http://sourceforge.net/projects/getmantra/ Sourceforge] 
[http://code.google.com/p/getmantra/ Google Code] 
[http://www.youtube.com/getmantra Youtube]
[http://mantralooks.blogspot.in/ Artworks]
[http://mantragallery.blogspot.com/ Wallpapers]

__NOTOC__ <headertabs />

[[Category:OWASP_Tool]] [[Category:OWASP_Alpha_Quality_Tool]] [[Category:OWASP_Project|Mantra - Security Framework]]
[[Category:OWASP Download]] [[Category:OWASP Project|Mantra - Security Framework]]

Projects/OWASP Mantra - Security Framework

2012-05-10T15:19:22Z

Yashartha Chaturvedi:

{{Template:<includeonly>{{{1}}}</includeonly><noinclude>Project About</noinclude>
| project_name = OWASP Mantra - Security Framework
| project_home_page = OWASP Mantra - Security Framework
| project_description =Mantra is a security framework which can be very helpful in performing all the five phases of attacks including reconnaissance, scanning and enumeration, gaining access, escalation of privileges,maintaining access, and covering tracks. Apart from that it also contains a set of tools targeted for web developers and code debuggers which makes it handy for both offensive security and defensive security related tasks.

| project_license =[http://www.gnu.org/copyleft/fdl.html GNU Free Documentation 1.2 for documents] & [http://www.gnu.org/licenses/gpl-3.0.html GPL v3 for source code]

| leader_name1 = Abhi M BalaKrishnan
| leader_email1 = abhi@getmantra.com
| leader_username1 = Abhi_M_Balakrishnan

| maintainer_name1 = Yashartha Chaturvedi
| maintainer_email1 = yashartha@getmantra.com
| maintainer_username1 = Yashartha_Chaturvedi

| pamphlet_link = http://www.owasp.org/images/e/e4/OWASP_Mantra-An_Introduction.pdf

| presentation_link = http://www.owasp.org/index.php/File:OWASP_Mantra-An_Introduction.pptx

| mailing_list_name = https://lists.owasp.org/mailman/listinfo/owasp-mantra

| project_road_map = http://www.owasp.org/index.php/OWASP_Mantra_-_Security_Framework/Roadmap

| links_url1 = http://getmantra.com
| links_name1 = http://getmantra.com

| links_url6 =
| links_name6 =

| release_1 = Mantra Security Toolkit - 0.52
| release_2 = Mantra Security Toolkit - 0.61
| release_3 = Mantra Security Toolkit - 0.71
| release_4 = Mantra Security Toolkit - 0.81
| release_5 = Mantra Security Toolkit - 0.91
| release_6 =


| project_about_page = Projects/OWASP Mantra - Security Framework

}}

Projects/OWASP Mantra - Security Framework/Releases/OWASP Mantra Lexicon - Beta 0.91

2012-05-10T15:17:41Z

{{Template: <includeonly>{{{1}}}</includeonly><noinclude>Release About</noinclude>

| project_name = OWASP Mantra - Security Framework

| project_home_page = OWASP Mantra - Security Framework

| release_name = OWASP Mantra Lexicon - Beta 0.91

| release_date = 10th May 2012

| release_description =
Fifth public beta release of OWASP Mantra Security Toolkit - Beta 0.91 code named [http://getmantra.com/ Lexicon] 

| release_license =
[http://www.gnu.org/copyleft/fdl.html GNU Free Documentation 1.2 for documents] & [http://www.gnu.org/licenses/gpl-3.0.html GPL v3 for source code]

| release_download_link = http://www.getmantra.com/download/index.html

| leader_name1 = Abhi M BalaKrishnan
| leader_email1 = abhi@getmantra.com
| leader_username1 = Abhi_M_Balakrishnan

| contributor_name1 = Yashartha Chaturvedi
| contributor_email1 = yashartha@getmantra.com
| contributor_username1 = Yashartha_Chaturvedi

| release_notes = http://getmantra.com/forums/Thread-OWASP-Mantra-Security-Toolkit-0-91-Beta-Lexicon?pid=350#pid350

| links_url1 =
| links_name1 =
}}

OWASP Mantra - Security Framework

2012-05-10T15:16:56Z

Yashartha Chaturvedi:

== Overview ==

[[Image:OWASP Mantra Security Framework.jpg|right|200px|OWASP Mantra Security Framework.jpg]] 

*Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software.
 
*Mantra is lite, flexible, portable and user friendly with a nice graphical user interface. You can carry it in memory cards, flash drives, CD/DVDs, etc. It can be run natively on Linux, Windows and Mac platforms. It can also be installed on to your system within minutes. Mantra is absolutely free of cost and takes no time for you to set up.

'''[http://getmantra.com/download/index.html Download Mantra - Security Framework]''' 

*[http://www.youtube.com/watch?v=GBFxVAM3DLQ Conference Video 1]
*[http://www.youtube.com/watch?v=bKACEDWKeyM Conference Video 2]
*[http://www.youtube.com/watch?v=qpVHWVOPHTk Conference Video 3]

*[http://chmag.in/article/feb2011/mantra-%E2%80%93-free-and-open-source-security-framework Article/Publication ]

 

== Project Goals ==
 
#Create an ecosystem for hackers based on browser
#To bring the attention of security people to the potential of a browser based security platform
#Provide easy to use and portable platform for demonstrating common web based attacks( read training )
#To associate with other security tools/products to make a better environment. Eg:
##It can be a nice addition to security distribution OSs like OWASP Live CD
##It can be used to solve basic levels of CTF contests
##It can associate with projects like DVWA to showcase attacks
##It can bring functions like crawler, SQL injection scanner etc by installing extensions.

 

== Tools ==

 " A sword never kills anybody; it is a tool in the killer's hand." - Lucius Annaeus Seneca 
Mantra is a powerful set of tools to make the attacker's task easier. The beta version of Mantra Security Toolkit contains following tools built onto it. Moreover Mantra follows the guidelines and structure of [http://firecat.fr/ FireCAT ] which makes it even more accessible. You can also always suggest any tools/ scripts that you would like see in the next release. 

[[Image:OWASP Mantra Security Framework in Ubuntu 11.png|thumb|300px|right|OWASP Mantra Security Framework running under Ubuntu 11 environment]]
 
[[Image:OWASP Mantra Security Framework in MAC Environment.png|thumb|300px|right|OWASP Mantra Security Framework running in MAC Environment]]
 
[[Image:OWASP Mantra Security Framework Screenshot.jpeg|thumb|300px|right|OWASP Mantra Security Framework Screenshot : under Windows 7 environment]]

+'''Information Gathering'''

- ''Flagfox'' 
- ''JSView'' 
- ''PassiveRecon'' 
- ''Wappalyzer'' 
- ''View Dependencies'' 
- ''Link Sidebar''

+'''Editors'''

- ''JSView'' 
- ''Firebug''

+'''Network Utilities'''

- ''FireFTP'' 
- ''DNS Cache'' 
- ''SQLite Manager'' 
- ''HTTP Fox'' 
- ''FireSSH''

+'''Miscellaneous'''

- ''Greasemonkey'' 
- ''Greasefire'' 
- ''CacheToggle'' 
- ''URL Flipper'' 
- ''Event Spy'' 
- ''Stacked Inspector'' 
- ''Scriptish'' 
- ''Session Manager'' 
- ''FireEncrypter'' 

+'''Application Auditing'''

- ''Hackbar'' 
- ''RESTClient'' 
- ''Tamper Data'' 
- ''Live HTTP Headers'' 
- ''RefControl'' 
- ''User Agent Switcher'' 
- ''Web Developer'' 
- ''DOM Inspector'' 
- ''Inspect This'' 
- ''Form Fox'' 
- ''SQL Inject Me'' 
- ''XSS Me'' 
- ''Cookies Manager+'' 
- ''Firecookie'' 
- ''Autofill Forms'' 
- ''Cookie Monster'' 
- ''Fireforce'' 
- ''Groundspeed'' 
- ''Http Requester'' 
- ''Modify Headers'' 
- ''Poster'' 
- ''Ref Spoof'' 
- ''SeleniumExpertSeleniumIDE'' 
- ''SeleniumIDE'' 
- ''NoRedirect'' 
- ''Websecurify'' 
- ''Ra.2''

+'''Proxy'''

- ''FoxyProxy'' 
- ''Http Fox'' ''
- ''Proxy Tool''

== News ==

 
[http://www.computerweekly.com/blogs/open-source-insider/2011/10/free-software-testing-on-usb-for-students-to-web-developers-with-mantra.html Computer Weekly Article] 
[http://getmantra.com/forums/Thread-owasp-mantra-c0c0n-11-and-appseclatam-11-release OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release] 
[http://www.ekoparty.org/2011/workshops/owasp-mantra-security-framework.php Mantra at Ekoparty Security Conference] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Mantra at OWASP LatamTour - Buenos Aires, Argentina] 
Getting secure with Mantra: An open source penetration testing kit - 1. [http://www.computerworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss Computer World] 2. [http://www.cio.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ CIO] 3. [http://www.techworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ Tech World] 4. [http://www.cso.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss CSO] 
[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 Searchsecurity Screencast] 
[http://getmantra.com/forums/Thread-mantra-in-matriux-upcoming-release-leaked Mantra in Matriux Security Distribution] 
[http://getmantra.com/forums/Thread-mantra-in-backtrack-5 Mantra in Backtrack 5 - Penetration Testing Distribution] 
[http://www.facebook.com/photo.php?fbid=185544081485201&set=a.170788249627451.33033.170787489627527&type=1&ref=nf Mantra – Free and Open Source Security Framework' - published in India's first hacking magazine ClubHack Mag] 
[http://clubhack.com/2010/speakers/ ClubHACK 2010 Mantra release]

== Contributors ==

 
"It is purpose that created us, purpose that connects us, purpose that pulls us, that guides us, that drives us, that binds us, it is purpose that defines us." - Agent Smith 
'''Project Leaders''' 
[[User:Abhi_M_Balakrishnan|Abhi M Balakrishnan]] 
[[User:Yashartha_Chaturvedi|Yashartha Chaturvedi]] 
[[User:Gokul_C_Gopinath|Gokul C Gopinath]] 

'''Other Members''' 
[[User:Maximiliano_Soler|Maximiliano Soler]] 
Gopu C Gopinath 
Thomas Mackenzie 
Niraj Mohite 
Rahul Babu R 

== Download ==

 
" All things are difficult before they are easy." - Thomas Fuller 
'''OWASP Mantra Security Toolkit - Beta 0.91 code named Lexicon''' 

{|
|'''Platform'''
|'''Details'''
|'''Links'''
|-
|'''Linux 32 bit'''
|MD5: 54784b658a0ad08ad6f7cfd18ea0a3d7
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/en-US/Mantra%20Lexicon%20Lin32%20EN.tar.bz2/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Lin32%20EN.tar.bz2 Mirror 2] [http://burnbit.com/torrent/200586/Mantra_Lexicon_Lin32_EN_tar_bz2 Torrent]
|-
|'''Linux 64 bit'''
|MD5: e4ffc6686c58e9dc3a38e89fb63e6b63
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/en-US/Mantra%20Lexicon%20Lin64%20EN.tar.bz2/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Lin64%20EN.tar.bz2 Mirror 2] [http://burnbit.com/torrent/200520/Mantra_Lexicon_Lin64_EN_tar_bz2 Torrent]
|-
|'''Windows'''
|MD5: db7a6f4a15667965c59296663e58a343
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/en-US/Mantra%20Lexicon%20Win%20EN.exe/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Win%20EN.exe Mirror 2] [http://burnbit.com/torrent/200339/Mantra_Lexicon_Win_EN_exe Torrent]
|-
|'''Macintosh'''
|MD5: 9c69fe858fc9709156d54676072d9281
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/en-US/Mantra%20Lexicon%20Mac%20EN.zip/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Mac%20EN.zip Mirror 2] [http://burnbit.com/torrent/200487/Mantra_Lexicon_Mac_EN_zip Torrent]
|-
|'''Source'''
|MD5: 7814e494504c4227411adb34b8fe2227
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/Mantra%20Lexicon%20Source.7z/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Source.7z Mirror 2] [http://burnbit.com/torrent/200588/Mantra_Lexicon_Source_7z Torrent]
|}

 
''Above given download links are only for Mantra in English- for other languages please check official website at'' http://www.getmantra.com/download/mantra-security-toolkit.html

[[Category:OWASP_Download]]

== Project About ==

{{:Projects/OWASP Mantra - Security Framework | Project About}}

== Resources ==
 

'''Project Pamphlets''' 

[http://www.owasp.org/images/e/e4/OWASP_Mantra-An_Introduction.pdf Project Pamphlet 1] 

'''Project Presentations''' 

[http://www.owasp.org/index.php/File:OWASP_Mantra-An_Introduction.pptx Project Presentation 1] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Project Presentation 2] 

'''Text Tutorials''' 

[http://getmantra.com/forums/Thread-introducing-passiverecon-by-justin-morehouse Introducing PassiveRecon by Justin Morehouse] 
[http://getmantra.com/forums/Thread-introducing-groundspeed-by-felipe Introducing Groundspeed by Felipe] 
[http://getmantra.com/forums/Thread-introducing-link-sidebar-by-varun-n Introducing Link Sidebar by Varun N] 
[http://getmantra.com/forums/Thread-introducing-proxytool-by-robert-rade Introducing ProxyTool by Robert Rade] 
[http://getmantra.com/forums/Thread-introducing-httpfox-by-martin-theimer Introducing HttpFox by Martin Theimer] 
[http://getmantra.com/forums/Thread-how-to-make-your-own-search-bar-item How to make your own search bar item] 
[http://getmantra.com/forums/Thread-how-to-use-moc-crawler How to use MoC crawler] 
[http://getmantra.com/forums/Thread-switching-between-languages-and-locales Switching between languages and locales] 
[http://getmantra.com/forums/Thread-running-mantra-and-firefox-together Running Mantra and Firefox together] 
[http://getmantra.com/forums/Thread-login-form-bypass-using-mantra-security-toolkit Login Form Bypass using Mantra Security Toolkit] 
[http://getmantra.com/forums/Thread-advanced-sql-injection-tutorial-complete-website-rooting Advanced SQL Injection Tutorial - Complete website rooting] 
[http://getmantra.com/forums/Thread-manual-crawling Manual Crawling] 
[http://getmantra.com/forums/Thread-introducing-flagfox Introducing Flagfox] 

'''Video Tutorials''' 

[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 SearchSecurity Screencast] 
ClubHACK 2010 - [http://www.youtube.com/watch?v=GBFxVAM3DLQ 1] [http://www.youtube.com/watch?v=bKACEDWKeyM 2] [http://www.youtube.com/watch?v=qpVHWVOPHTk 3] 
[http://www.youtube.com/watch?v=yTbB42sR208 Broken Authentication Demonstration] 
[http://www.youtube.com/watch?v=o1WVx6eYE-M Broken Session Demonstration] 
[http://www.youtube.com/watch?v=vvPeskadF-s Insecure Direct Object References Demonstration] 
[http://www.youtube.com/watch?v=NK3S-nwiGwA Cross Site Scripting Demonstration] 
[http://www.youtube.com/watch?v=p94ssETMbQ0& Introduction + How to use Mantra Security Toolkit] 
[http://www.youtube.com/watch?v=fxHlthnVJpA Introduction to Mantra (Arabic)] 
[http://www.youtube.com/watch?v=exyUAGseifI Introducing FoxyProxy (Arabic)]
[http://www.youtube.com/watch?v=vFcY584Wmw0 OWASP Mantra - URL Shortener Script SQL Injection Vulnerability]
[http://www.youtube.com/watch?v=CRJkGZlV6Vk OWASP Mantra and LAMP Security CTF 6]
[http://www.youtube.com/watch?v=aPk5vCqh-2k OWASP Mantra and Who Wants to be a Millionaire]
[http://www.youtube.com/watch?v=0lPz24Z7Q_4 OWASP Mantra - One File CMS - Failure to Restrict URL Access]

==== Links ====
 
[http://www.getmantra.com/index.html Main Website] 
[http://www.getmantra.com/forums/ Discussion Forums] 
[http://www.facebook.com/getmantra/ Facebook Page] 
[http://getmantra.tumblr.com/ Tumblr] 
[http://twitter.com/getmantra Twitter] 
[http://vimeo.com/getmantra Vimeo] 
[http://sourceforge.net/projects/getmantra/ Sourceforge] 
[http://code.google.com/p/getmantra/ Google Code] 
[http://www.youtube.com/getmantra Youtube]
[http://mantralooks.blogspot.in/ Artworks]
[http://mantragallery.blogspot.com/ Wallpapers]

__NOTOC__ <headertabs />

[[Category:OWASP_Tool]] [[Category:OWASP_Alpha_Quality_Tool]] [[Category:OWASP_Project|Mantra - Security Framework]]
[[Category:OWASP Download]]

Projects/OWASP Mantra - Security Framework/Releases/Current

2012-05-10T15:03:04Z

Yashartha Chaturvedi: Redirected page to Projects/OWASP Mantra - Security Framework/Releases/Mantra Security Toolkit - 0.91

#REDIRECT [[Projects/OWASP Mantra - Security Framework/Releases/Mantra_Security_Toolkit_-_0.91]]

Projects/OWASP Mantra - Security Framework/Releases/Mantra Security Toolkit - 0.91

2012-05-10T14:57:27Z

{{Template: <includeonly>{{{1}}}</includeonly><noinclude>Release About</noinclude>

| project_name = OWASP Mantra - Security Framework

| project_home_page = OWASP Mantra - Security Framework

| release_name = OWASP Mantra Lexicon - Beta 0.91

| release_date = 10th May 2012

| release_description =
Fifth public beta release of OWASP Mantra Security Toolkit - Beta 0.91 code named [http://getmantra.com/ Lexicon] 

| release_license =
[http://www.gnu.org/copyleft/fdl.html GNU Free Documentation 1.2 for documents] & [http://www.gnu.org/licenses/gpl-3.0.html GPL v3 for source code]

| release_download_link = http://www.getmantra.com/download/index.html

| leader_name1 = Abhi M BalaKrishnan
| leader_email1 = abhi@getmantra.com
| leader_username1 = Abhi_M_Balakrishnan

| contributor_name1 = Yashartha Chaturvedi
| contributor_email1 = yashartha@getmantra.com
| contributor_username1 = Yashartha_Chaturvedi

| release_notes = http://getmantra.com/forums/Thread-OWASP-Mantra-Security-Toolkit-0-91-Beta-Lexicon?pid=350#pid350

| links_url1 =
| links_name1 =
}}

OWASP Mantra - Security Framework

2012-05-10T14:26:04Z

Yashartha Chaturvedi:

== Overview ==

[[Image:OWASP Mantra Security Framework.jpg|right|200px|OWASP Mantra Security Framework.jpg]] 

*Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software.
 
*Mantra is lite, flexible, portable and user friendly with a nice graphical user interface. You can carry it in memory cards, flash drives, CD/DVDs, etc. It can be run natively on Linux, Windows and Mac platforms. It can also be installed on to your system within minutes. Mantra is absolutely free of cost and takes no time for you to set up.

'''[http://getmantra.com/download/index.html Download Mantra - Security Framework]''' 

*[http://www.youtube.com/watch?v=GBFxVAM3DLQ Conference Video 1]
*[http://www.youtube.com/watch?v=bKACEDWKeyM Conference Video 2]
*[http://www.youtube.com/watch?v=qpVHWVOPHTk Conference Video 3]

*[http://chmag.in/article/feb2011/mantra-%E2%80%93-free-and-open-source-security-framework Article/Publication ]

 

== Project Goals ==
 
#Create an ecosystem for hackers based on browser
#To bring the attention of security people to the potential of a browser based security platform
#Provide easy to use and portable platform for demonstrating common web based attacks( read training )
#To associate with other security tools/products to make a better environment. Eg:
##It can be a nice addition to security distribution OSs like OWASP Live CD
##It can be used to solve basic levels of CTF contests
##It can associate with projects like DVWA to showcase attacks
##It can bring functions like crawler, SQL injection scanner etc by installing extensions.

 

== Tools ==

 " A sword never kills anybody; it is a tool in the killer's hand." - Lucius Annaeus Seneca 
Mantra is a powerful set of tools to make the attacker's task easier. The beta version of Mantra Security Toolkit contains following tools built onto it. Moreover Mantra follows the guidelines and structure of [http://firecat.fr/ FireCAT ] which makes it even more accessible. You can also always suggest any tools/ scripts that you would like see in the next release. 

[[Image:OWASP Mantra Security Framework in Ubuntu 11.png|thumb|300px|right|OWASP Mantra Security Framework running under Ubuntu 11 environment]]
 
[[Image:OWASP Mantra Security Framework in MAC Environment.png|thumb|300px|right|OWASP Mantra Security Framework running in MAC Environment]]
 
[[Image:OWASP Mantra Security Framework Screenshot.jpeg|thumb|300px|right|OWASP Mantra Security Framework Screenshot : under Windows 7 environment]]

+'''Information Gathering'''

- ''Flagfox'' 
- ''JSView'' 
- ''PassiveRecon'' 
- ''Wappalyzer'' 
- ''View Dependencies'' 
- ''Link Sidebar''

+'''Editors'''

- ''JSView'' 
- ''Firebug''

+'''Network Utilities'''

- ''FireFTP'' 
- ''DNS Cache'' 
- ''SQLite Manager'' 
- ''HTTP Fox'' 
- ''FireSSH''

+'''Miscellaneous'''

- ''Greasemonkey'' 
- ''Greasefire'' 
- ''CacheToggle'' 
- ''URL Flipper'' 
- ''Event Spy'' 
- ''Stacked Inspector'' 
- ''Scriptish'' 
- ''Session Manager'' 
- ''FireEncrypter'' 

+'''Application Auditing'''

- ''Hackbar'' 
- ''RESTClient'' 
- ''Tamper Data'' 
- ''Live HTTP Headers'' 
- ''RefControl'' 
- ''User Agent Switcher'' 
- ''Web Developer'' 
- ''DOM Inspector'' 
- ''Inspect This'' 
- ''Form Fox'' 
- ''SQL Inject Me'' 
- ''XSS Me'' 
- ''Cookies Manager+'' 
- ''Firecookie'' 
- ''Autofill Forms'' 
- ''Cookie Monster'' 
- ''Fireforce'' 
- ''Groundspeed'' 
- ''Http Requester'' 
- ''Modify Headers'' 
- ''Poster'' 
- ''Ref Spoof'' 
- ''SeleniumExpertSeleniumIDE'' 
- ''SeleniumIDE'' 
- ''NoRedirect'' 
- ''Websecurify'' 
- ''Ra.2''

+'''Proxy'''

- ''FoxyProxy'' 
- ''Http Fox'' ''
- ''Proxy Tool''

== News ==

 
[http://www.computerweekly.com/blogs/open-source-insider/2011/10/free-software-testing-on-usb-for-students-to-web-developers-with-mantra.html Computer Weekly Article] 
[http://getmantra.com/forums/Thread-owasp-mantra-c0c0n-11-and-appseclatam-11-release OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release] 
[http://www.ekoparty.org/2011/workshops/owasp-mantra-security-framework.php Mantra at Ekoparty Security Conference] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Mantra at OWASP LatamTour - Buenos Aires, Argentina] 
Getting secure with Mantra: An open source penetration testing kit - 1. [http://www.computerworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss Computer World] 2. [http://www.cio.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ CIO] 3. [http://www.techworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ Tech World] 4. [http://www.cso.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss CSO] 
[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 Searchsecurity Screencast] 
[http://getmantra.com/forums/Thread-mantra-in-matriux-upcoming-release-leaked Mantra in Matriux Security Distribution] 
[http://getmantra.com/forums/Thread-mantra-in-backtrack-5 Mantra in Backtrack 5 - Penetration Testing Distribution] 
[http://www.facebook.com/photo.php?fbid=185544081485201&set=a.170788249627451.33033.170787489627527&type=1&ref=nf Mantra – Free and Open Source Security Framework' - published in India's first hacking magazine ClubHack Mag] 
[http://clubhack.com/2010/speakers/ ClubHACK 2010 Mantra release]

== Contributors ==

 
"It is purpose that created us, purpose that connects us, purpose that pulls us, that guides us, that drives us, that binds us, it is purpose that defines us." - Agent Smith 
'''Project Leaders''' 
[[User:Abhi_M_Balakrishnan|Abhi M Balakrishnan]] 
[[User:Yashartha_Chaturvedi|Yashartha Chaturvedi]] 
[[User:Gokul_C_Gopinath|Gokul C Gopinath]] 

'''Other Members''' 
[[User:Maximiliano_Soler|Maximiliano Soler]] 
Gopu C Gopinath 
Thomas Mackenzie 

== Download ==

 
" All things are difficult before they are easy." - Thomas Fuller 
'''OWASP Mantra Security Toolkit - Beta 0.91 code named Lexicon''' 

{|
|'''Platform'''
|'''Details'''
|'''Links'''
|-
|'''Linux 32 bit'''
|MD5: 54784b658a0ad08ad6f7cfd18ea0a3d7
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/en-US/Mantra%20Lexicon%20Lin32%20EN.tar.bz2/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Lin32%20EN.tar.bz2 Mirror 2] [http://burnbit.com/torrent/200586/Mantra_Lexicon_Lin32_EN_tar_bz2 Torrent]
|-
|'''Linux 64 bit'''
|MD5: e4ffc6686c58e9dc3a38e89fb63e6b63
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/en-US/Mantra%20Lexicon%20Lin64%20EN.tar.bz2/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Lin64%20EN.tar.bz2 Mirror 2] [http://burnbit.com/torrent/200520/Mantra_Lexicon_Lin64_EN_tar_bz2 Torrent]
|-
|'''Windows'''
|MD5: db7a6f4a15667965c59296663e58a343
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/en-US/Mantra%20Lexicon%20Win%20EN.exe/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Win%20EN.exe Mirror 2] [http://burnbit.com/torrent/200339/Mantra_Lexicon_Win_EN_exe Torrent]
|-
|'''Macintosh'''
|MD5: 9c69fe858fc9709156d54676072d9281
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/en-US/Mantra%20Lexicon%20Mac%20EN.zip/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Mac%20EN.zip Mirror 2] [http://burnbit.com/torrent/200487/Mantra_Lexicon_Mac_EN_zip Torrent]
|-
|'''Source'''
|MD5: 7814e494504c4227411adb34b8fe2227
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/Mantra%20Lexicon%20Source.7z/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Source.7z Mirror 2] [http://burnbit.com/torrent/200588/Mantra_Lexicon_Source_7z Torrent]
|}

[[Category:OWASP_Download]]

== Project About ==

{{:Projects/OWASP Mantra - Security Framework | Project About}}

== Resources ==
 

'''Project Pamphlets''' 

[http://www.owasp.org/images/e/e4/OWASP_Mantra-An_Introduction.pdf Project Pamphlet 1] 

'''Project Presentations''' 

[http://www.owasp.org/index.php/File:OWASP_Mantra-An_Introduction.pptx Project Presentation 1] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Project Presentation 2] 

'''Text Tutorials''' 

[http://getmantra.com/forums/Thread-introducing-passiverecon-by-justin-morehouse Introducing PassiveRecon by Justin Morehouse] 
[http://getmantra.com/forums/Thread-introducing-groundspeed-by-felipe Introducing Groundspeed by Felipe] 
[http://getmantra.com/forums/Thread-introducing-link-sidebar-by-varun-n Introducing Link Sidebar by Varun N] 
[http://getmantra.com/forums/Thread-introducing-proxytool-by-robert-rade Introducing ProxyTool by Robert Rade] 
[http://getmantra.com/forums/Thread-introducing-httpfox-by-martin-theimer Introducing HttpFox by Martin Theimer] 
[http://getmantra.com/forums/Thread-how-to-make-your-own-search-bar-item How to make your own search bar item] 
[http://getmantra.com/forums/Thread-how-to-use-moc-crawler How to use MoC crawler] 
[http://getmantra.com/forums/Thread-switching-between-languages-and-locales Switching between languages and locales] 
[http://getmantra.com/forums/Thread-running-mantra-and-firefox-together Running Mantra and Firefox together] 
[http://getmantra.com/forums/Thread-login-form-bypass-using-mantra-security-toolkit Login Form Bypass using Mantra Security Toolkit] 
[http://getmantra.com/forums/Thread-advanced-sql-injection-tutorial-complete-website-rooting Advanced SQL Injection Tutorial - Complete website rooting] 
[http://getmantra.com/forums/Thread-manual-crawling Manual Crawling] 
[http://getmantra.com/forums/Thread-introducing-flagfox Introducing Flagfox] 

'''Video Tutorials''' 

[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 SearchSecurity Screencast] 
ClubHACK 2010 - [http://www.youtube.com/watch?v=GBFxVAM3DLQ 1] [http://www.youtube.com/watch?v=bKACEDWKeyM 2] [http://www.youtube.com/watch?v=qpVHWVOPHTk 3] 
[http://www.youtube.com/watch?v=yTbB42sR208 Broken Authentication Demonstration] 
[http://www.youtube.com/watch?v=o1WVx6eYE-M Broken Session Demonstration] 
[http://www.youtube.com/watch?v=vvPeskadF-s Insecure Direct Object References Demonstration] 
[http://www.youtube.com/watch?v=NK3S-nwiGwA Cross Site Scripting Demonstration] 
[http://www.youtube.com/watch?v=p94ssETMbQ0& Introduction + How to use Mantra Security Toolkit] 
[http://www.youtube.com/watch?v=fxHlthnVJpA Introduction to Mantra (Arabic)] 
[http://www.youtube.com/watch?v=exyUAGseifI Introducing FoxyProxy (Arabic)]
[http://www.youtube.com/watch?v=vFcY584Wmw0 OWASP Mantra - URL Shortener Script SQL Injection Vulnerability]
[http://www.youtube.com/watch?v=CRJkGZlV6Vk OWASP Mantra and LAMP Security CTF 6]
[http://www.youtube.com/watch?v=aPk5vCqh-2k OWASP Mantra and Who Wants to be a Millionaire]
[http://www.youtube.com/watch?v=0lPz24Z7Q_4 OWASP Mantra - One File CMS - Failure to Restrict URL Access]

==== Links ====
 
[http://www.getmantra.com/index.html Main Website] 
[http://www.getmantra.com/forums/ Discussion Forums] 
[http://www.facebook.com/getmantra/ Facebook Page] 
[http://getmantra.tumblr.com/ Tumblr] 
[http://twitter.com/getmantra Twitter] 
[http://vimeo.com/getmantra Vimeo] 
[http://sourceforge.net/projects/getmantra/ Sourceforge] 
[http://code.google.com/p/getmantra/ Google Code] 
[http://www.youtube.com/getmantra Youtube]
[http://mantralooks.blogspot.in/ Artworks]
[http://mantragallery.blogspot.com/ Wallpapers]

__NOTOC__ <headertabs />

[[Category:OWASP_Tool]] [[Category:OWASP_Alpha_Quality_Tool]] [[Category:OWASP_Project|Mantra - Security Framework]]
[[Category:OWASP Download]]

OWASP Mantra - Security Framework

2012-05-10T13:41:52Z

Yashartha Chaturvedi:

== Overview ==

[[Image:OWASP Mantra Security Framework.jpg|right|200px|OWASP Mantra Security Framework.jpg]] 

*Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software.
 
*Mantra is lite, flexible, portable and user friendly with a nice graphical user interface. You can carry it in memory cards, flash drives, CD/DVDs, etc. It can be run natively on Linux, Windows and Mac platforms. It can also be installed on to your system within minutes. Mantra is absolutely free of cost and takes no time for you to set up.

'''[http://getmantra.com/download/index.html Download Mantra - Security Framework]''' 

*[http://www.youtube.com/watch?v=GBFxVAM3DLQ Conference Video 1]
*[http://www.youtube.com/watch?v=bKACEDWKeyM Conference Video 2]
*[http://www.youtube.com/watch?v=qpVHWVOPHTk Conference Video 3]

*[http://chmag.in/article/feb2011/mantra-%E2%80%93-free-and-open-source-security-framework Article/Publication ]

 

== Project Goals ==
 
#Create an ecosystem for hackers based on browser
#To bring the attention of security people to the potential of a browser based security platform
#Provide easy to use and portable platform for demonstrating common web based attacks( read training )
#To associate with other security tools/products to make a better environment. Eg:
##It can be a nice addition to security distribution OSs like OWASP Live CD
##It can be used to solve basic levels of CTF contests
##It can associate with projects like DVWA to showcase attacks
##It can bring functions like crawler, SQL injection scanner etc by installing extensions.

 

== Tools ==

 " A sword never kills anybody; it is a tool in the killer's hand." - Lucius Annaeus Seneca 
Mantra is a powerful set of tools to make the attacker's task easier. The beta version of Mantra Security Toolkit contains following tools built onto it. Moreover Mantra follows the guidelines and structure of [http://firecat.fr/ FireCAT ] which makes it even more accessible. You can also always suggest any tools/ scripts that you would like see in the next release. 

[[Image:OWASP Mantra Security Framework in Ubuntu 11.png|thumb|300px|right|OWASP Mantra Security Framework running under Ubuntu 11 environment]]
 
[[Image:OWASP Mantra Security Framework in MAC Environment.png|thumb|300px|right|OWASP Mantra Security Framework running in MAC Environment]]
 
[[Image:OWASP Mantra Security Framework Screenshot.jpeg|thumb|300px|right|OWASP Mantra Security Framework Screenshot : under Windows 7 environment]]

+'''Information Gathering'''

- ''Flagfox'' 
- ''JSView'' 
- ''PassiveRecon'' 
- ''Wappalyzer'' 
- ''View Dependencies'' 
- ''Link Sidebar''

+'''Editors'''

- ''JSView'' 
- ''Firebug''

+'''Network Utilities'''

- ''FireFTP'' 
- ''DNS Cache'' 
- ''SQLite Manager'' 
- ''HTTP Fox'' 
- ''FireSSH''

+'''Miscellaneous'''

- ''Greasemonkey'' 
- ''Greasefire'' 
- ''CacheToggle'' 
- ''URL Flipper'' 
- ''Event Spy'' 
- ''Stacked Inspector'' 
- ''Scriptish'' 
- ''Session Manager'' 

+'''Application Auditing'''

- ''Hackbar'' 
- ''RESTClient'' 
- ''Tamper Data'' 
- ''Live HTTP Headers'' 
- ''RefControl'' 
- ''User Agent Switcher'' 
- ''Web Developer'' 
- ''DOM Inspector'' 
- ''Inspect This'' 
- ''Form Fox'' 
- ''SQL Inject Me'' 
- ''XSS Me'' 
- ''Cookies Manager+'' 
- ''Firecookie'' 
- ''Autofill Forms'' 
- ''Cookie Monster'' 
- ''Fireforce'' 
- ''Groundspeed'' 
- ''Http Requester'' 
- ''Modify Headers'' 
- ''Poster'' 
- ''Ref Spoof'' 
- ''SeleniumExpertSeleniumIDE'' 
- ''SeleniumIDE'' 
- ''NoRedirect'' 
- ''Websecurify'' 
- ''Ra.2''

+'''Proxy'''

- ''FoxyProxy'' 
- ''Http Fox'' ''
- ''Proxy Tool''

== News ==

 
[http://www.computerweekly.com/blogs/open-source-insider/2011/10/free-software-testing-on-usb-for-students-to-web-developers-with-mantra.html Computer Weekly Article] 
[http://getmantra.com/forums/Thread-owasp-mantra-c0c0n-11-and-appseclatam-11-release OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release] 
[http://www.ekoparty.org/2011/workshops/owasp-mantra-security-framework.php Mantra at Ekoparty Security Conference] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Mantra at OWASP LatamTour - Buenos Aires, Argentina] 
Getting secure with Mantra: An open source penetration testing kit - 1. [http://www.computerworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss Computer World] 2. [http://www.cio.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ CIO] 3. [http://www.techworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ Tech World] 4. [http://www.cso.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss CSO] 
[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 Searchsecurity Screencast] 
[http://getmantra.com/forums/Thread-mantra-in-matriux-upcoming-release-leaked Mantra in Matriux Security Distribution] 
[http://getmantra.com/forums/Thread-mantra-in-backtrack-5 Mantra in Backtrack 5 - Penetration Testing Distribution] 
[http://www.facebook.com/photo.php?fbid=185544081485201&set=a.170788249627451.33033.170787489627527&type=1&ref=nf Mantra – Free and Open Source Security Framework' - published in India's first hacking magazine ClubHack Mag] 
[http://clubhack.com/2010/speakers/ ClubHACK 2010 Mantra release]

== Contributors ==

 
"It is purpose that created us, purpose that connects us, purpose that pulls us, that guides us, that drives us, that binds us, it is purpose that defines us." - Agent Smith 
'''Project Leaders''' 
[[User:Abhi_M_Balakrishnan|Abhi M Balakrishnan]] 
[[User:Yashartha_Chaturvedi|Yashartha Chaturvedi]] 
[[User:Gokul_C_Gopinath|Gokul C Gopinath]] 

'''Other Members''' 
[[User:Maximiliano_Soler|Maximiliano Soler]] 
Gopu C Gopinath 
Thomas Mackenzie 

== Download ==

 
" All things are difficult before they are easy." - Thomas Fuller 
'''OWASP Mantra Security Toolkit - Beta 0.91 code named Lexicon''' 

{|
|'''Platform'''
|'''Details'''
|'''Links'''
|-
|'''Linux 32 bit'''
|MD5: 54784b658a0ad08ad6f7cfd18ea0a3d7
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/en-US/Mantra%20Lexicon%20Lin32%20EN.tar.bz2/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Lin32%20EN.tar.bz2 Mirror 2] [http://burnbit.com/torrent/200586/Mantra_Lexicon_Lin32_EN_tar_bz2 Torrent]
|-
|'''Linux 64 bit'''
|MD5: e4ffc6686c58e9dc3a38e89fb63e6b63
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/en-US/Mantra%20Lexicon%20Lin64%20EN.tar.bz2/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Lin64%20EN.tar.bz2 Mirror 2] [http://burnbit.com/torrent/200520/Mantra_Lexicon_Lin64_EN_tar_bz2 Torrent]
|-
|'''Windows'''
|MD5: db7a6f4a15667965c59296663e58a343
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/en-US/Mantra%20Lexicon%20Win%20EN.exe/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Win%20EN.exe Mirror 2] [http://burnbit.com/torrent/200339/Mantra_Lexicon_Win_EN_exe Torrent]
|-
|'''Macintosh'''
|MD5: 9c69fe858fc9709156d54676072d9281
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/en-US/Mantra%20Lexicon%20Mac%20EN.zip/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Mac%20EN.zip Mirror 2] [http://burnbit.com/torrent/200487/Mantra_Lexicon_Mac_EN_zip Torrent]
|-
|'''Source'''
|MD5: 7814e494504c4227411adb34b8fe2227
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Lexicon%20-%200.91%20Beta/Mantra%20Lexicon%20Source.7z/download Mirror 1] [http://getmantra.googlecode.com/files/Mantra%20Lexicon%20Source.7z Mirror 2] [http://burnbit.com/torrent/200588/Mantra_Lexicon_Source_7z Torrent]
|}

[[Category:OWASP_Download]]

== Project About ==

{{:Projects/OWASP Mantra - Security Framework | Project About}}

== Resources ==
 

'''Project Pamphlets''' 

[http://www.owasp.org/images/e/e4/OWASP_Mantra-An_Introduction.pdf Project Pamphlet 1] 

'''Project Presentations''' 

[http://www.owasp.org/index.php/File:OWASP_Mantra-An_Introduction.pptx Project Presentation 1] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Project Presentation 2] 

'''Text Tutorials''' 

[http://getmantra.com/forums/Thread-introducing-passiverecon-by-justin-morehouse Introducing PassiveRecon by Justin Morehouse] 
[http://getmantra.com/forums/Thread-introducing-groundspeed-by-felipe Introducing Groundspeed by Felipe] 
[http://getmantra.com/forums/Thread-introducing-link-sidebar-by-varun-n Introducing Link Sidebar by Varun N] 
[http://getmantra.com/forums/Thread-introducing-proxytool-by-robert-rade Introducing ProxyTool by Robert Rade] 
[http://getmantra.com/forums/Thread-introducing-httpfox-by-martin-theimer Introducing HttpFox by Martin Theimer] 
[http://getmantra.com/forums/Thread-how-to-make-your-own-search-bar-item How to make your own search bar item] 
[http://getmantra.com/forums/Thread-how-to-use-moc-crawler How to use MoC crawler] 
[http://getmantra.com/forums/Thread-switching-between-languages-and-locales Switching between languages and locales] 
[http://getmantra.com/forums/Thread-running-mantra-and-firefox-together Running Mantra and Firefox together] 
[http://getmantra.com/forums/Thread-login-form-bypass-using-mantra-security-toolkit Login Form Bypass using Mantra Security Toolkit] 
[http://getmantra.com/forums/Thread-advanced-sql-injection-tutorial-complete-website-rooting Advanced SQL Injection Tutorial - Complete website rooting] 
[http://getmantra.com/forums/Thread-manual-crawling Manual Crawling] 
[http://getmantra.com/forums/Thread-introducing-flagfox Introducing Flagfox] 

'''Video Tutorials''' 

[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 SearchSecurity Screencast] 
ClubHACK 2010 - [http://www.youtube.com/watch?v=GBFxVAM3DLQ 1] [http://www.youtube.com/watch?v=bKACEDWKeyM 2] [http://www.youtube.com/watch?v=qpVHWVOPHTk 3] 
[http://www.youtube.com/watch?v=yTbB42sR208 Broken Authentication Demonstration] 
[http://www.youtube.com/watch?v=o1WVx6eYE-M Broken Session Demonstration] 
[http://www.youtube.com/watch?v=vvPeskadF-s Insecure Direct Object References Demonstration] 
[http://www.youtube.com/watch?v=NK3S-nwiGwA Cross Site Scripting Demonstration] 
[http://www.youtube.com/watch?v=p94ssETMbQ0& Introduction + How to use Mantra Security Toolkit] 
[http://www.youtube.com/watch?v=fxHlthnVJpA Introduction to Mantra (Arabic)] 
[http://www.youtube.com/watch?v=exyUAGseifI Introducing FoxyProxy (Arabic)]
[http://www.youtube.com/watch?v=vFcY584Wmw0 OWASP Mantra - URL Shortener Script SQL Injection Vulnerability]
[http://www.youtube.com/watch?v=CRJkGZlV6Vk OWASP Mantra and LAMP Security CTF 6]
[http://www.youtube.com/watch?v=aPk5vCqh-2k OWASP Mantra and Who Wants to be a Millionaire]
[http://www.youtube.com/watch?v=0lPz24Z7Q_4 OWASP Mantra - One File CMS - Failure to Restrict URL Access]

==== Links ====
 
[http://www.getmantra.com/index.html Main Website] 
[http://www.getmantra.com/forums/ Discussion Forums] 
[http://www.facebook.com/getmantra/ Facebook Page] 
[http://getmantra.tumblr.com/ Tumblr] 
[http://twitter.com/getmantra Twitter] 
[http://vimeo.com/getmantra Vimeo] 
[http://sourceforge.net/projects/getmantra/ Sourceforge] 
[http://code.google.com/p/getmantra/ Google Code] 
[http://www.youtube.com/getmantra Youtube]
[http://mantralooks.blogspot.in/ Artworks]
[http://mantragallery.blogspot.com/ Wallpapers]

__NOTOC__ <headertabs />

[[Category:OWASP_Tool]] [[Category:OWASP_Alpha_Quality_Tool]] [[Category:OWASP_Project|Mantra - Security Framework]]
[[Category:OWASP Download]]

OWASP Mantra - Security Framework

2012-05-10T13:27:27Z

Yashartha Chaturvedi:

== Overview ==

[[Image:OWASP Mantra Security Framework.jpg|right|200px|OWASP Mantra Security Framework.jpg]] 

*Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software.
 
*Mantra is lite, flexible, portable and user friendly with a nice graphical user interface. You can carry it in memory cards, flash drives, CD/DVDs, etc. It can be run natively on Linux, Windows and Mac platforms. It can also be installed on to your system within minutes. Mantra is absolutely free of cost and takes no time for you to set up.

'''[http://getmantra.com/download/index.html Download Mantra - Security Framework]''' 

*[http://www.youtube.com/watch?v=GBFxVAM3DLQ Conference Video 1]
*[http://www.youtube.com/watch?v=bKACEDWKeyM Conference Video 2]
*[http://www.youtube.com/watch?v=qpVHWVOPHTk Conference Video 3]

*[http://chmag.in/article/feb2011/mantra-%E2%80%93-free-and-open-source-security-framework Article/Publication ]

 

== Project Goals ==
 
#Create an ecosystem for hackers based on browser
#To bring the attention of security people to the potential of a browser based security platform
#Provide easy to use and portable platform for demonstrating common web based attacks( read training )
#To associate with other security tools/products to make a better environment. Eg:
##It can be a nice addition to security distribution OSs like OWASP Live CD
##It can be used to solve basic levels of CTF contests
##It can associate with projects like DVWA to showcase attacks
##It can bring functions like crawler, SQL injection scanner etc by installing extensions.

 

== Tools ==

 " A sword never kills anybody; it is a tool in the killer's hand." - Lucius Annaeus Seneca 
Mantra is a powerful set of tools to make the attacker's task easier. The beta version of Mantra Security Toolkit contains following tools built onto it. Moreover Mantra follows the guidelines and structure of [http://firecat.fr/ FireCAT ] which makes it even more accessible. You can also always suggest any tools/ scripts that you would like see in the next release. 

[[Image:OWASP Mantra Security Framework in Ubuntu 11.png|thumb|300px|right|OWASP Mantra Security Framework running under Ubuntu 11 environment]]
 
[[Image:OWASP Mantra Security Framework in MAC Environment.png|thumb|300px|right|OWASP Mantra Security Framework running in MAC Environment]]
 
[[Image:OWASP Mantra Security Framework Screenshot.jpeg|thumb|300px|right|OWASP Mantra Security Framework Screenshot : under Windows 7 environment]]

+'''Information Gathering'''

- ''Flagfox'' 
- ''JSView'' 
- ''PassiveRecon'' 
- ''Wappalyzer'' 
- ''View Dependencies'' 
- ''Link Sidebar''

+'''Editors'''

- ''JSView'' 
- ''Firebug''

+'''Network Utilities'''

- ''FireFTP'' 
- ''DNS Cache'' 
- ''SQLite Manager'' 
- ''HTTP Fox'' 
- ''FireSSH''

+'''Miscellaneous'''

- ''Greasemonkey'' 
- ''Greasefire'' 
- ''CacheToggle'' 
- ''URL Flipper'' 
- ''Event Spy'' 
- ''Stacked Inspector'' 
- ''Scriptish'' 
- ''Session Manager'' 
- ''FireEncrypter'' 

+'''Application Auditing'''

- ''Hackbar'' 
- ''RESTClient'' 
- ''Tamper Data'' 
- ''Live HTTP Headers'' 
- ''RefControl'' 
- ''User Agent Switcher'' 
- ''Web Developer'' 
- ''DOM Inspector'' 
- ''Inspect This'' 
- ''Form Fox'' 
- ''SQL Inject Me'' 
- ''XSS Me'' 
- ''Cookies Manager+'' 
- ''Firecookie'' 
- ''Autofill Forms'' 
- ''Cookie Monster'' 
- ''Fireforce'' 
- ''Groundspeed'' 
- ''Http Requester'' 
- ''Modify Headers'' 
- ''Poster'' 
- ''Ref Spoof'' 
- ''SeleniumExpertSeleniumIDE'' 
- ''SeleniumIDE'' 
- ''NoRedirect'' 
- ''Websecurify'' 
- ''Ra.2''

+'''Proxy'''

- ''FoxyProxy'' 
- ''Http Fox'' ''
- ''Proxy Tool''

== News ==

 
[http://www.computerweekly.com/blogs/open-source-insider/2011/10/free-software-testing-on-usb-for-students-to-web-developers-with-mantra.html Computer Weekly Article] 
[http://getmantra.com/forums/Thread-owasp-mantra-c0c0n-11-and-appseclatam-11-release OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release] 
[http://www.ekoparty.org/2011/workshops/owasp-mantra-security-framework.php Mantra at Ekoparty Security Conference] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Mantra at OWASP LatamTour - Buenos Aires, Argentina] 
Getting secure with Mantra: An open source penetration testing kit - 1. [http://www.computerworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss Computer World] 2. [http://www.cio.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ CIO] 3. [http://www.techworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ Tech World] 4. [http://www.cso.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss CSO] 
[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 Searchsecurity Screencast] 
[http://getmantra.com/forums/Thread-mantra-in-matriux-upcoming-release-leaked Mantra in Matriux Security Distribution] 
[http://getmantra.com/forums/Thread-mantra-in-backtrack-5 Mantra in Backtrack 5 - Penetration Testing Distribution] 
[http://www.facebook.com/photo.php?fbid=185544081485201&set=a.170788249627451.33033.170787489627527&type=1&ref=nf Mantra – Free and Open Source Security Framework' - published in India's first hacking magazine ClubHack Mag] 
[http://clubhack.com/2010/speakers/ ClubHACK 2010 Mantra release]

== Contributors ==

 
"It is purpose that created us, purpose that connects us, purpose that pulls us, that guides us, that drives us, that binds us, it is purpose that defines us." - Agent Smith 
'''Project Leaders''' 
[[User:Abhi_M_Balakrishnan|Abhi M Balakrishnan]] 
[[User:Yashartha_Chaturvedi|Yashartha Chaturvedi]] 
[[User:Gokul_C_Gopinath|Gokul C Gopinath]] 

'''Other Members''' 
[[User:Maximiliano_Soler|Maximiliano Soler]] 
Gopu C Gopinath 
Thomas Mackenzie 

== Download ==

 
" All things are difficult before they are easy." - Thomas Fuller 
'''OWASP Mantra Security Toolkit - Beta 0.81 code named Armada''' 

{|
|'''Platform'''
|'''Details'''
|'''Links'''
|-
|'''Linux 32 bit'''
|MD5: e4c94e433a2e99cad0d8bea4aaf9fc08
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%2032%20bit%20Linux%20fixed.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%2032%20bit%20Linux%20fixed.zip Mirror 2] [http://burnbit.com/torrent/184854/OWASP_Mantra_Armada_32_bit_Linux_fixed_zip Torrent]
|-
|'''Linux 64 bit'''
|MD5: 8e16d3fede90168e23fbd0489c58b80f
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%2064%20bit%20Linux%20fixed.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%2064%20bit%20Linux%20fixed.zip Mirror 2] [http://burnbit.com/torrent/184851/OWASP_Mantra_Armada_64_bit_Linux_fixed_zip Torrent]
|-
|'''Windows'''
|MD5: 80450610eb86871e68f410335cae5f01
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Win.exe/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Win.exe Mirror 2] [http://burnbit.com/download/183928/OWASP_Mantra_Armada_Win_exe Torrent]
|-
|'''Macintosh'''
|MD5: f256cf80a94ce960a90c441eb4b00ce0
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Mac.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Mac.zip Mirror 2] [http://burnbit.com/download/183927/OWASP_Mantra_Armada_Mac_zip Torrent]
|-
|'''Source'''
|MD5: af9a3b960b56a94a7c6227d62d674bea
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Source.7z/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Source.7z Mirror 2] [http://burnbit.com/torrent/183979/OWASP_Mantra_Armada_Source_7z Torrent]
|}

[[Category:OWASP_Download]]

== Project About ==

{{:Projects/OWASP Mantra - Security Framework | Project About}}

== Resources ==
 

'''Project Pamphlets''' 

[http://www.owasp.org/images/e/e4/OWASP_Mantra-An_Introduction.pdf Project Pamphlet 1] 

'''Project Presentations''' 

[http://www.owasp.org/index.php/File:OWASP_Mantra-An_Introduction.pptx Project Presentation 1] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Project Presentation 2] 

'''Text Tutorials''' 

[http://getmantra.com/forums/Thread-introducing-passiverecon-by-justin-morehouse Introducing PassiveRecon by Justin Morehouse] 
[http://getmantra.com/forums/Thread-introducing-groundspeed-by-felipe Introducing Groundspeed by Felipe] 
[http://getmantra.com/forums/Thread-introducing-link-sidebar-by-varun-n Introducing Link Sidebar by Varun N] 
[http://getmantra.com/forums/Thread-introducing-proxytool-by-robert-rade Introducing ProxyTool by Robert Rade] 
[http://getmantra.com/forums/Thread-introducing-httpfox-by-martin-theimer Introducing HttpFox by Martin Theimer] 
[http://getmantra.com/forums/Thread-how-to-make-your-own-search-bar-item How to make your own search bar item] 
[http://getmantra.com/forums/Thread-how-to-use-moc-crawler How to use MoC crawler] 
[http://getmantra.com/forums/Thread-switching-between-languages-and-locales Switching between languages and locales] 
[http://getmantra.com/forums/Thread-running-mantra-and-firefox-together Running Mantra and Firefox together] 
[http://getmantra.com/forums/Thread-login-form-bypass-using-mantra-security-toolkit Login Form Bypass using Mantra Security Toolkit] 
[http://getmantra.com/forums/Thread-advanced-sql-injection-tutorial-complete-website-rooting Advanced SQL Injection Tutorial - Complete website rooting] 
[http://getmantra.com/forums/Thread-manual-crawling Manual Crawling] 
[http://getmantra.com/forums/Thread-introducing-flagfox Introducing Flagfox] 

'''Video Tutorials''' 

[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 SearchSecurity Screencast] 
ClubHACK 2010 - [http://www.youtube.com/watch?v=GBFxVAM3DLQ 1] [http://www.youtube.com/watch?v=bKACEDWKeyM 2] [http://www.youtube.com/watch?v=qpVHWVOPHTk 3] 
[http://www.youtube.com/watch?v=yTbB42sR208 Broken Authentication Demonstration] 
[http://www.youtube.com/watch?v=o1WVx6eYE-M Broken Session Demonstration] 
[http://www.youtube.com/watch?v=vvPeskadF-s Insecure Direct Object References Demonstration] 
[http://www.youtube.com/watch?v=NK3S-nwiGwA Cross Site Scripting Demonstration] 
[http://www.youtube.com/watch?v=p94ssETMbQ0& Introduction + How to use Mantra Security Toolkit] 
[http://www.youtube.com/watch?v=fxHlthnVJpA Introduction to Mantra (Arabic)] 
[http://www.youtube.com/watch?v=exyUAGseifI Introducing FoxyProxy (Arabic)]
[http://www.youtube.com/watch?v=vFcY584Wmw0 OWASP Mantra - URL Shortener Script SQL Injection Vulnerability]
[http://www.youtube.com/watch?v=CRJkGZlV6Vk OWASP Mantra and LAMP Security CTF 6]
[http://www.youtube.com/watch?v=aPk5vCqh-2k OWASP Mantra and Who Wants to be a Millionaire]
[http://www.youtube.com/watch?v=0lPz24Z7Q_4 OWASP Mantra - One File CMS - Failure to Restrict URL Access]

==== Links ====
 
[http://www.getmantra.com/index.html Main Website] 
[http://www.getmantra.com/forums/ Discussion Forums] 
[http://www.facebook.com/getmantra/ Facebook Page] 
[http://getmantra.tumblr.com/ Tumblr] 
[http://twitter.com/getmantra Twitter] 
[http://vimeo.com/getmantra Vimeo] 
[http://sourceforge.net/projects/getmantra/ Sourceforge] 
[http://code.google.com/p/getmantra/ Google Code] 
[http://www.youtube.com/getmantra Youtube]
[http://mantralooks.blogspot.in/ Artworks]
[http://mantragallery.blogspot.com/ Wallpapers]

__NOTOC__ <headertabs />

[[Category:OWASP_Tool]] [[Category:OWASP_Alpha_Quality_Tool]] [[Category:OWASP_Project|Mantra - Security Framework]]
[[Category:OWASP Download]]

OWASP Mantra - Security Framework

2012-05-10T13:04:21Z

Yashartha Chaturvedi:

== Overview ==

[[Image:OWASP Mantra Security Framework.jpg|right|200px|OWASP Mantra Security Framework.jpg]] 

*Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software.
 
*Mantra is lite, flexible, portable and user friendly with a nice graphical user interface. You can carry it in memory cards, flash drives, CD/DVDs, etc. It can be run natively on Linux, Windows and Mac platforms. It can also be installed on to your system within minutes. Mantra is absolutely free of cost and takes no time for you to set up.

'''[http://getmantra.com/download/index.html Download Mantra - Security Framework]''' 

*[http://www.youtube.com/watch?v=GBFxVAM3DLQ Conference Video 1]
*[http://www.youtube.com/watch?v=bKACEDWKeyM Conference Video 2]
*[http://www.youtube.com/watch?v=qpVHWVOPHTk Conference Video 3]

*[http://chmag.in/article/feb2011/mantra-%E2%80%93-free-and-open-source-security-framework Article/Publication ]

 

== Project Goals ==
 
#Create an ecosystem for hackers based on browser
#To bring the attention of security people to the potential of a browser based security platform
#Provide easy to use and portable platform for demonstrating common web based attacks( read training )
#To associate with other security tools/products to make a better environment. Eg:
##It can be a nice addition to security distribution OSs like OWASP Live CD
##It can be used to solve basic levels of CTF contests
##It can associate with projects like DVWA to showcase attacks
##It can bring functions like crawler, SQL injection scanner etc by installing extensions.

 

== Tools ==

 " A sword never kills anybody; it is a tool in the killer's hand." - Lucius Annaeus Seneca 
Mantra is a powerful set of tools to make the attacker's task easier. The beta version of Mantra Security Toolkit contains following tools built onto it. Moreover Mantra follows the guidelines and structure of [http://firecat.fr/ FireCAT ] which makes it even more accessible. You can also always suggest any tools/ scripts that you would like see in the next release. 

[[Image:OWASP Mantra Security Framework in Ubuntu 11.png|thumb|300px|right|OWASP Mantra Security Framework running under Ubuntu 11 environment]]
 
[[Image:OWASP Mantra Security Framework in MAC Environment.png|thumb|300px|right|OWASP Mantra Security Framework running in MAC Environment]]
 
[[Image:OWASP Mantra Security Framework Screenshot.jpeg|thumb|300px|right|OWASP Mantra Security Framework Screenshot : under Windows 7 environment]]

+'''Information Gathering'''

- ''Flagfox'' 
- ''JSView'' 
- ''PassiveRecon'' 
- ''Wappalyzer'' 
- ''View Dependencies'' 
- ''Link Sidebar''

+'''Editors'''

- ''JSView'' 
- ''Firebug''

+'''Network Utilities'''

- ''FireFTP'' 
- ''DNS Cache'' 
- ''SQLite Manager'' 
- ''HTTP Fox'' 
- ''FireSSH''

+'''Miscellaneous'''

- ''Greasemonkey'' 
- ''Greasefire'' 
- ''CacheToggle'' 
- ''URL Flipper'' 
- ''Event Spy'' 
- ''Stacked Inspector'' 
- ''Scriptish'' 
- ''Session Manager'' 

+'''Application Auditing'''

- ''Hackbar'' 
- ''RESTClient'' 
- ''Tamper Data'' 
- ''Live HTTP Headers'' 
- ''RefControl'' 
- ''User Agent Switcher'' 
- ''Web Developer'' 
- ''DOM Inspector'' 
- ''Inspect This'' 
- ''Form Fox'' 
- ''SQL Inject Me'' 
- ''XSS Me'' 
- ''Cookies Manager+'' 
- ''Firecookie'' 
- ''Autofill Forms'' 
- ''Cookie Monster'' 
- ''Fireforce'' 
- ''Groundspeed'' 
- ''Http Requester'' 
- ''Modify Headers'' 
- ''Poster'' 
- ''Ref Spoof'' 
- ''SeleniumExpertSeleniumIDE'' 
- ''SeleniumIDE'' 
- ''NoRedirect'' 
- ''Websecurify'' 
- ''Ra.2''

+'''Proxy'''

- ''FoxyProxy'' 
- ''Http Fox'' ''
- ''Proxy Tool''

== News ==

 
[http://www.computerweekly.com/blogs/open-source-insider/2011/10/free-software-testing-on-usb-for-students-to-web-developers-with-mantra.html Computer Weekly Article] 
[http://getmantra.com/forums/Thread-owasp-mantra-c0c0n-11-and-appseclatam-11-release OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release] 
[http://www.ekoparty.org/2011/workshops/owasp-mantra-security-framework.php Mantra at Ekoparty Security Conference] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Mantra at OWASP LatamTour - Buenos Aires, Argentina] 
Getting secure with Mantra: An open source penetration testing kit - 1. [http://www.computerworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss Computer World] 2. [http://www.cio.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ CIO] 3. [http://www.techworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ Tech World] 4. [http://www.cso.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss CSO] 
[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 Searchsecurity Screencast] 
[http://getmantra.com/forums/Thread-mantra-in-matriux-upcoming-release-leaked Mantra in Matriux Security Distribution] 
[http://getmantra.com/forums/Thread-mantra-in-backtrack-5 Mantra in Backtrack 5 - Penetration Testing Distribution] 
[http://www.facebook.com/photo.php?fbid=185544081485201&set=a.170788249627451.33033.170787489627527&type=1&ref=nf Mantra – Free and Open Source Security Framework' - published in India's first hacking magazine ClubHack Mag] 
[http://clubhack.com/2010/speakers/ ClubHACK 2010 Mantra release]

== Contributors ==

 
"It is purpose that created us, purpose that connects us, purpose that pulls us, that guides us, that drives us, that binds us, it is purpose that defines us." - Agent Smith 
'''Project Leaders''' 
[[User:Abhi_M_Balakrishnan|Abhi M Balakrishnan]] 
[[User:Yashartha_Chaturvedi|Yashartha Chaturvedi]] 
[[User:Gokul_C_Gopinath|Gokul C Gopinath]] 

'''Other Members''' 
[[User:Maximiliano_Soler|Maximiliano Soler]] 
Gopu C Gopinath 
Thomas Mackenzie 

== Download ==

 
" All things are difficult before they are easy." - Thomas Fuller 
'''OWASP Mantra Security Toolkit - Beta 0.81 code named Armada''' 

{|
|'''Platform'''
|'''Details'''
|'''Links'''
|-
|'''Linux 32 bit'''
|MD5: e4c94e433a2e99cad0d8bea4aaf9fc08
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%2032%20bit%20Linux%20fixed.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%2032%20bit%20Linux%20fixed.zip Mirror 2] [http://burnbit.com/torrent/184854/OWASP_Mantra_Armada_32_bit_Linux_fixed_zip Torrent]
|-
|'''Linux 64 bit'''
|MD5: 8e16d3fede90168e23fbd0489c58b80f
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%2064%20bit%20Linux%20fixed.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%2064%20bit%20Linux%20fixed.zip Mirror 2] [http://burnbit.com/torrent/184851/OWASP_Mantra_Armada_64_bit_Linux_fixed_zip Torrent]
|-
|'''Windows'''
|MD5: 80450610eb86871e68f410335cae5f01
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Win.exe/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Win.exe Mirror 2] [http://burnbit.com/download/183928/OWASP_Mantra_Armada_Win_exe Torrent]
|-
|'''Macintosh'''
|MD5: f256cf80a94ce960a90c441eb4b00ce0
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Mac.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Mac.zip Mirror 2] [http://burnbit.com/download/183927/OWASP_Mantra_Armada_Mac_zip Torrent]
|-
|'''Source'''
|MD5: af9a3b960b56a94a7c6227d62d674bea
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Source.7z/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Source.7z Mirror 2] [http://burnbit.com/torrent/183979/OWASP_Mantra_Armada_Source_7z Torrent]
|}

[[Category:OWASP_Download]]

== Project About ==

{{:Projects/OWASP Mantra - Security Framework | Project About}}

== Resources ==
 

'''Project Pamphlets''' 

[http://www.owasp.org/images/e/e4/OWASP_Mantra-An_Introduction.pdf Project Pamphlet 1] 

'''Project Presentations''' 

[http://www.owasp.org/index.php/File:OWASP_Mantra-An_Introduction.pptx Project Presentation 1] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Project Presentation 2] 

'''Text Tutorials''' 

[http://getmantra.com/forums/Thread-introducing-passiverecon-by-justin-morehouse Introducing PassiveRecon by Justin Morehouse] 
[http://getmantra.com/forums/Thread-introducing-groundspeed-by-felipe Introducing Groundspeed by Felipe] 
[http://getmantra.com/forums/Thread-introducing-link-sidebar-by-varun-n Introducing Link Sidebar by Varun N] 
[http://getmantra.com/forums/Thread-introducing-proxytool-by-robert-rade Introducing ProxyTool by Robert Rade] 
[http://getmantra.com/forums/Thread-introducing-httpfox-by-martin-theimer Introducing HttpFox by Martin Theimer] 
[http://getmantra.com/forums/Thread-how-to-make-your-own-search-bar-item How to make your own search bar item] 
[http://getmantra.com/forums/Thread-how-to-use-moc-crawler How to use MoC crawler] 
[http://getmantra.com/forums/Thread-switching-between-languages-and-locales Switching between languages and locales] 
[http://getmantra.com/forums/Thread-running-mantra-and-firefox-together Running Mantra and Firefox together] 
[http://getmantra.com/forums/Thread-login-form-bypass-using-mantra-security-toolkit Login Form Bypass using Mantra Security Toolkit] 
[http://getmantra.com/forums/Thread-advanced-sql-injection-tutorial-complete-website-rooting Advanced SQL Injection Tutorial - Complete website rooting] 
[http://getmantra.com/forums/Thread-manual-crawling Manual Crawling] 
[http://getmantra.com/forums/Thread-introducing-flagfox Introducing Flagfox] 

'''Video Tutorials''' 

[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 SearchSecurity Screencast] 
ClubHACK 2010 - [http://www.youtube.com/watch?v=GBFxVAM3DLQ 1] [http://www.youtube.com/watch?v=bKACEDWKeyM 2] [http://www.youtube.com/watch?v=qpVHWVOPHTk 3] 
[http://www.youtube.com/watch?v=yTbB42sR208 Broken Authentication Demonstration] 
[http://www.youtube.com/watch?v=o1WVx6eYE-M Broken Session Demonstration] 
[http://www.youtube.com/watch?v=vvPeskadF-s Insecure Direct Object References Demonstration] 
[http://www.youtube.com/watch?v=NK3S-nwiGwA Cross Site Scripting Demonstration] 
[http://www.youtube.com/watch?v=p94ssETMbQ0& Introduction + How to use Mantra Security Toolkit] 
[http://www.youtube.com/watch?v=fxHlthnVJpA Introduction to Mantra (Arabic)] 
[http://www.youtube.com/watch?v=exyUAGseifI Introducing FoxyProxy (Arabic)]
[http://www.youtube.com/watch?v=vFcY584Wmw0 OWASP Mantra - URL Shortener Script SQL Injection Vulnerability]
[http://www.youtube.com/watch?v=CRJkGZlV6Vk OWASP Mantra and LAMP Security CTF 6]
[http://www.youtube.com/watch?v=aPk5vCqh-2k OWASP Mantra and Who Wants to be a Millionaire]
[http://www.youtube.com/watch?v=0lPz24Z7Q_4 OWASP Mantra - One File CMS - Failure to Restrict URL Access]

==== Links ====
 
[http://www.getmantra.com/index.html Main Website] 
[http://www.getmantra.com/forums/ Discussion Forums] 
[http://www.facebook.com/getmantra/ Facebook Page] 
[http://getmantra.tumblr.com/ Tumblr] 
[http://twitter.com/getmantra Twitter] 
[http://vimeo.com/getmantra Vimeo] 
[http://sourceforge.net/projects/getmantra/ Sourceforge] 
[http://code.google.com/p/getmantra/ Google Code] 
[http://www.youtube.com/getmantra Youtube]
[http://mantralooks.blogspot.in/ Artworks]
[http://mantragallery.blogspot.com/ Wallpapers]

__NOTOC__ <headertabs />

[[Category:OWASP_Tool]] [[Category:OWASP_Alpha_Quality_Tool]] [[Category:OWASP_Project|Mantra - Security Framework]]
[[Category:OWASP Download]]

User:Yashartha Chaturvedi

2012-04-17T17:36:17Z

Yashartha Chaturvedi:

Driven by quest in technology - strongly believes that information security is a shared social responsibility. A [http://en.wikipedia.org/wiki/User:Yashartha_Chaturvedi Wikipedian], Project Leader [https://www.owasp.org/index.php/OWASP_Mantra_-_Security_Framework OWASP Mantra Security Framework], Team Member [http://matriux.com Matriux] - Debian based Security Distribution , Information Security Consultant at [http://slybulwark.com Slybulwark]

 
[https://www.owasp.org/index.php/OWASP_Mantra_-_Security_Framework OWASP Mantra - Security Framework]
 
[http://en.wikipedia.org/wiki/OWASP_Mantra_Security_Framework Mantra - Browser based security framework]
 
[http://en.wikipedia.org/wiki/Matriux Matriux - The Open Source Security Distribution for Ethical Hackers and Penetration Testers]
 
[http://matriux.sf.net/ Matriux Sourceforge.net Download]
 
[http://www.is-ra.org/index.html Information Security Research Association]

OWASP Mantra - Security Framework

2012-04-17T17:13:30Z

Yashartha Chaturvedi:

== Overview ==

[[Image:OWASP Mantra Security Framework.jpg|right|200px|OWASP Mantra Security Framework.jpg]] 

*Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software.
 
*Mantra is lite, flexible, portable and user friendly with a nice graphical user interface. You can carry it in memory cards, flash drives, CD/DVDs, etc. It can be run natively on Linux, Windows and Mac platforms. It can also be installed on to your system within minutes. Mantra is absolutely free of cost and takes no time for you to set up.

'''[http://getmantra.com/download/index.html Download Mantra - Security Framework]''' 

*[http://www.youtube.com/watch?v=GBFxVAM3DLQ Conference Video 1]
*[http://www.youtube.com/watch?v=bKACEDWKeyM Conference Video 2]
*[http://www.youtube.com/watch?v=qpVHWVOPHTk Conference Video 3]

*[http://chmag.in/article/feb2011/mantra-%E2%80%93-free-and-open-source-security-framework Article/Publication ]

 

== Project Goals ==
 
#Create an ecosystem for hackers based on browser
#To bring the attention of security people to the potential of a browser based security platform
#Provide easy to use and portable platform for demonstrating common web based attacks( read training )
#To associate with other security tools/products to make a better environment. Eg:
##It can be a nice addition to security distribution OSs like OWASP Live CD
##It can be used to solve basic levels of CTF contests
##It can associate with projects like DVWA to showcase attacks
##It can bring functions like crawler, SQL injection scanner etc by installing extensions.

 

== Tools ==

 " A sword never kills anybody; it is a tool in the killer's hand." - Lucius Annaeus Seneca 
Mantra is a powerful set of tools to make the attacker's task easier. The beta version of Mantra Security Toolkit contains following tools built onto it. Moreover Mantra follows the guidelines and structure of [http://firecat.fr/ FireCAT ] which makes it even more accessible. You can also always suggest any tools/ scripts that you would like see in the next release. 

[[Image:OWASP Mantra Security Framework in Ubuntu 11.png|thumb|300px|right|OWASP Mantra Security Framework running under Ubuntu 11 environment]]
 
[[Image:OWASP Mantra Security Framework in MAC Environment.png|thumb|300px|right|OWASP Mantra Security Framework running in MAC Environment]]
 
[[Image:OWASP Mantra Security Framework Screenshot.jpeg|thumb|300px|right|OWASP Mantra Security Framework Screenshot : under Windows 7 environment]]

+'''Information Gathering'''

- ''Flagfox'' 
- ''JSView'' 
- ''PassiveRecon'' 
- ''Facebook search'' 
- ''People Search Engine'' 
- ''View Dependencies'' 
- ''Link Sidebar''

+'''Editors'''

- ''JSView'' 
- ''Firebug''

+'''Network Utilities'''

- ''FireFTP'' 
- ''DNS Cache'' 
- ''SQLite Manager'' 
- ''HTTP Fox'' 
- ''FireSSH''

+'''Miscellaneous'''

- ''Greasemonkey'' 
- ''Greasefire'' 
- ''CacheToggle'' 
- ''URL Flipper'' 
- ''Event Spy'' 
- ''Firebug Autocompleter'' 
- ''FirePHP'' 
- ''FireRainbow'' 
- ''Flashbug'' 
- ''Illuminations for Developers'' 
- ''In line Code Finder for Firebug'' 
- ''Inspect Context'' 
- ''Inspector Widget'' 
- ''Inspect This'' 
- ''Scriptish'' 
- ''Session Manager'' 
- ''Stacked Inspector''

+'''Application Auditing'''

- ''Hackbar'' 
- ''RESTClient'' 
- ''Tamper Data'' 
- ''Live HTTP Headers'' 
- ''RefControl'' 
- ''User Agent Switcher'' 
- ''Web Developer'' 
- ''DOM Inspector'' 
- ''Inspect This'' 
- ''Formfox'' 
- ''SQL Inject Me'' 
- ''XSS Me'' 
- ''Cookies Manager+'' 
- ''Firecookie'' 
- ''Autofill Forms'' 
- ''Cookie Monster'' 
- ''Fireforce'' 
- ''Groundspeed'' 
- ''Http Requester'' 
- ''Modify Headers'' 
- ''Poster'' 
- ''Ref Spoof'' 
- ''SeleniumExpertSeleniumIDE'' 
- ''SeleniumIDE'' 
- ''SOAClient'' 
- ''Websecurify''

+'''Proxy'''

- ''FoxyProxy'' 
- ''HttpFox'' ''
- ''Proxy Tool''

== News ==

 
[http://www.computerweekly.com/blogs/open-source-insider/2011/10/free-software-testing-on-usb-for-students-to-web-developers-with-mantra.html Computer Weekly Article] 
[http://getmantra.com/forums/Thread-owasp-mantra-c0c0n-11-and-appseclatam-11-release OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release] 
[http://www.ekoparty.org/2011/workshops/owasp-mantra-security-framework.php Mantra at Ekoparty Security Conference] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Mantra at OWASP LatamTour - Buenos Aires, Argentina] 
Getting secure with Mantra: An open source penetration testing kit - 1. [http://www.computerworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss Computer World] 2. [http://www.cio.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ CIO] 3. [http://www.techworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ Tech World] 4. [http://www.cso.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss CSO] 
[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 Searchsecurity Screencast] 
[http://getmantra.com/forums/Thread-mantra-in-matriux-upcoming-release-leaked Mantra in Matriux Security Distribution] 
[http://getmantra.com/forums/Thread-mantra-in-backtrack-5 Mantra in Backtrack 5 - Penetration Testing Distribution] 
[http://www.facebook.com/photo.php?fbid=185544081485201&set=a.170788249627451.33033.170787489627527&type=1&ref=nf Mantra – Free and Open Source Security Framework' - published in India's first hacking magazine ClubHack Mag] 
[http://clubhack.com/2010/speakers/ ClubHACK 2010 Mantra release]

== Contributors ==

 
"It is purpose that created us, purpose that connects us, purpose that pulls us, that guides us, that drives us, that binds us, it is purpose that defines us." - Agent Smith 
'''Project Leaders''' 
[[User:Abhi_M_Balakrishnan|Abhi M Balakrishnan]] 
[[User:Yashartha_Chaturvedi|Yashartha Chaturvedi]] 
[[User:Gokul_C_Gopinath|Gokul C Gopinath]] 

'''Other Members''' 
[[User:Maximiliano_Soler|Maximiliano Soler]] 
Gopu C Gopinath 
Thomas Mackenzie 

== Download ==

 
" All things are difficult before they are easy." - Thomas Fuller 
'''OWASP Mantra Security Toolkit - Beta 0.81 code named Armada''' 

{|
|'''Platform'''
|'''Details'''
|'''Links'''
|-
|'''Linux 32 bit'''
|MD5: e4c94e433a2e99cad0d8bea4aaf9fc08
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%2032%20bit%20Linux%20fixed.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%2032%20bit%20Linux%20fixed.zip Mirror 2] [http://burnbit.com/torrent/184854/OWASP_Mantra_Armada_32_bit_Linux_fixed_zip Torrent]
|-
|'''Linux 64 bit'''
|MD5: 8e16d3fede90168e23fbd0489c58b80f
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%2064%20bit%20Linux%20fixed.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%2064%20bit%20Linux%20fixed.zip Mirror 2] [http://burnbit.com/torrent/184851/OWASP_Mantra_Armada_64_bit_Linux_fixed_zip Torrent]
|-
|'''Windows'''
|MD5: 80450610eb86871e68f410335cae5f01
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Win.exe/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Win.exe Mirror 2] [http://burnbit.com/download/183928/OWASP_Mantra_Armada_Win_exe Torrent]
|-
|'''Macintosh'''
|MD5: f256cf80a94ce960a90c441eb4b00ce0
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Mac.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Mac.zip Mirror 2] [http://burnbit.com/download/183927/OWASP_Mantra_Armada_Mac_zip Torrent]
|-
|'''Source'''
|MD5: af9a3b960b56a94a7c6227d62d674bea
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Source.7z/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Source.7z Mirror 2] [http://burnbit.com/torrent/183979/OWASP_Mantra_Armada_Source_7z Torrent]
|}

[[Category:OWASP_Download]]

== Project About ==

{{:Projects/OWASP Mantra - Security Framework | Project About}}

== Resources ==
 

'''Project Pamphlets''' 

[http://www.owasp.org/images/e/e4/OWASP_Mantra-An_Introduction.pdf Project Pamphlet 1] 

'''Project Presentations''' 

[http://www.owasp.org/index.php/File:OWASP_Mantra-An_Introduction.pptx Project Presentation 1] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Project Presentation 2] 

'''Text Tutorials''' 

[http://getmantra.com/forums/Thread-introducing-passiverecon-by-justin-morehouse Introducing PassiveRecon by Justin Morehouse] 
[http://getmantra.com/forums/Thread-introducing-groundspeed-by-felipe Introducing Groundspeed by Felipe] 
[http://getmantra.com/forums/Thread-introducing-link-sidebar-by-varun-n Introducing Link Sidebar by Varun N] 
[http://getmantra.com/forums/Thread-introducing-proxytool-by-robert-rade Introducing ProxyTool by Robert Rade] 
[http://getmantra.com/forums/Thread-introducing-httpfox-by-martin-theimer Introducing HttpFox by Martin Theimer] 
[http://getmantra.com/forums/Thread-how-to-make-your-own-search-bar-item How to make your own search bar item] 
[http://getmantra.com/forums/Thread-how-to-use-moc-crawler How to use MoC crawler] 
[http://getmantra.com/forums/Thread-switching-between-languages-and-locales Switching between languages and locales] 
[http://getmantra.com/forums/Thread-running-mantra-and-firefox-together Running Mantra and Firefox together] 
[http://getmantra.com/forums/Thread-login-form-bypass-using-mantra-security-toolkit Login Form Bypass using Mantra Security Toolkit] 
[http://getmantra.com/forums/Thread-advanced-sql-injection-tutorial-complete-website-rooting Advanced SQL Injection Tutorial - Complete website rooting] 
[http://getmantra.com/forums/Thread-manual-crawling Manual Crawling] 
[http://getmantra.com/forums/Thread-introducing-flagfox Introducing Flagfox] 

'''Video Tutorials''' 

[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 SearchSecurity Screencast] 
ClubHACK 2010 - [http://www.youtube.com/watch?v=GBFxVAM3DLQ 1] [http://www.youtube.com/watch?v=bKACEDWKeyM 2] [http://www.youtube.com/watch?v=qpVHWVOPHTk 3] 
[http://www.youtube.com/watch?v=yTbB42sR208 Broken Authentication Demonstration] 
[http://www.youtube.com/watch?v=o1WVx6eYE-M Broken Session Demonstration] 
[http://www.youtube.com/watch?v=vvPeskadF-s Insecure Direct Object References Demonstration] 
[http://www.youtube.com/watch?v=NK3S-nwiGwA Cross Site Scripting Demonstration] 
[http://www.youtube.com/watch?v=p94ssETMbQ0& Introduction + How to use Mantra Security Toolkit] 
[http://www.youtube.com/watch?v=fxHlthnVJpA Introduction to Mantra (Arabic)] 
[http://www.youtube.com/watch?v=exyUAGseifI Introducing FoxyProxy (Arabic)]
[http://www.youtube.com/watch?v=vFcY584Wmw0 OWASP Mantra - URL Shortener Script SQL Injection Vulnerability]
[http://www.youtube.com/watch?v=CRJkGZlV6Vk OWASP Mantra and LAMP Security CTF 6]
[http://www.youtube.com/watch?v=aPk5vCqh-2k OWASP Mantra and Who Wants to be a Millionaire]
[http://www.youtube.com/watch?v=0lPz24Z7Q_4 OWASP Mantra - One File CMS - Failure to Restrict URL Access]

==== Links ====
 
[http://www.getmantra.com/index.html Main Website] 
[http://www.getmantra.com/forums/ Discussion Forums] 
[http://www.facebook.com/getmantra/ Facebook Page] 
[http://getmantra.tumblr.com/ Tumblr] 
[http://twitter.com/getmantra Twitter] 
[http://vimeo.com/getmantra Vimeo] 
[http://sourceforge.net/projects/getmantra/ Sourceforge] 
[http://code.google.com/p/getmantra/ Google Code] 
[http://www.youtube.com/getmantra Youtube]
[http://mantralooks.blogspot.in/ Artworks]
[http://mantragallery.blogspot.com/ Wallpapers]

__NOTOC__ <headertabs />

[[Category:OWASP_Tool]] [[Category:OWASP_Alpha_Quality_Tool]] [[Category:OWASP_Project|Mantra - Security Framework]]
[[Category:OWASP Download]]

File:OWASP Mantra Security Framework Screenshot.jpeg

2012-04-17T17:11:01Z

Yashartha Chaturvedi: OWASP Mantra Security Framework Screenshot : under Windows 7 environment

OWASP Mantra Security Framework Screenshot : under Windows 7 environment

File:OWASP Mantra Security Framework in MAC Environment.png

2012-04-17T17:04:31Z

Yashartha Chaturvedi: OWASP Mantra Security Framework running in MAC Environment

OWASP Mantra Security Framework running in MAC Environment

File:OWASP Mantra Security Framework in Ubuntu 11.png

2012-04-17T16:55:00Z

Yashartha Chaturvedi: OWASP Mantra Security Framework running in Ubuntu 11

OWASP Mantra Security Framework running in Ubuntu 11

OWASP Mantra - Security Framework

2012-04-17T16:45:50Z

Yashartha Chaturvedi:

== Overview ==

[[Image:OWASP Mantra Security Framework.jpg|right|200px|OWASP Mantra Security Framework.jpg]] 

*Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software.
 
*Mantra is lite, flexible, portable and user friendly with a nice graphical user interface. You can carry it in memory cards, flash drives, CD/DVDs, etc. It can be run natively on Linux, Windows and Mac platforms. It can also be installed on to your system within minutes. Mantra is absolutely free of cost and takes no time for you to set up.

'''[http://getmantra.com/download/index.html Download Mantra - Security Framework]''' 

*[http://www.youtube.com/watch?v=GBFxVAM3DLQ Conference Video 1]
*[http://www.youtube.com/watch?v=bKACEDWKeyM Conference Video 2]
*[http://www.youtube.com/watch?v=qpVHWVOPHTk Conference Video 3]

*[http://chmag.in/article/feb2011/mantra-%E2%80%93-free-and-open-source-security-framework Article/Publication ]

 

== Project Goals ==

#Create an ecosystem for hackers based on browser
#To bring the attention of security people to the potential of a browser based security platform
#Provide easy to use and portable platform for demonstrating common web based attacks( read training )
#To associate with other security tools/products to make a better environment. Eg:
##It can be a nice addition to security distribution OSs like OWASP Live CD
##It can be used to solve basic levels of CTF contests
##It can associate with projects like DVWA to showcase attacks
##It can bring functions like crawler, SQL injection scanner etc by installing extensions.

 

== Tools ==

 " A sword never kills anybody; it is a tool in the killer's hand." - Lucius Annaeus Seneca 
Mantra is a powerful set of tools to make the attacker's task easier. The beta version of Mantra Security Toolkit contains following tools built onto it. Moreover Mantra follows the guidelines and structure of [http://firecat.fr/ FireCAT ] which makes it even more accessible. You can also always suggest any tools/ scripts that you would like see in the next release. 

+'''Information Gathering'''

- ''Flagfox'' 
- ''JSView'' 
- ''PassiveRecon'' 
- ''Facebook search'' 
- ''People Search Engine'' 
- ''View Dependencies'' 
- ''Link Sidebar''

+'''Editors'''

- ''JSView'' 
- ''Firebug''

+'''Network Utilities'''

- ''FireFTP'' 
- ''DNS Cache'' 
- ''SQLite Manager'' 
- ''HTTP Fox'' 
- ''FireSSH''

+'''Miscellaneous'''

- ''Greasemonkey'' 
- ''Greasefire'' 
- ''CacheToggle'' 
- ''URL Flipper'' 
- ''Event Spy'' 
- ''Firebug Autocompleter'' 
- ''FirePHP'' 
- ''FireRainbow'' 
- ''Flashbug'' 
- ''Illuminations for Developers'' 
- ''In line Code Finder for Firebug'' 
- ''Inspect Context'' 
- ''Inspector Widget'' 
- ''Inspect This'' 
- ''Scriptish'' 
- ''Session Manager'' 
- ''Stacked Inspector''

+'''Application Auditing'''

- ''Hackbar'' 
- ''RESTClient'' 
- ''Tamper Data'' 
- ''Live HTTP Headers'' 
- ''RefControl'' 
- ''User Agent Switcher'' 
- ''Web Developer'' 
- ''DOM Inspector'' 
- ''Inspect This'' 
- ''Formfox'' 
- ''SQL Inject Me'' 
- ''XSS Me'' 
- ''Cookies Manager+'' 
- ''Firecookie'' 
- ''Autofill Forms'' 
- ''Cookie Monster'' 
- ''Fireforce'' 
- ''Groundspeed'' 
- ''Http Requester'' 
- ''Modify Headers'' 
- ''Poster'' 
- ''Ref Spoof'' 
- ''SeleniumExpertSeleniumIDE'' 
- ''SeleniumIDE'' 
- ''SOAClient'' 
- ''Websecurify''

+'''Proxy'''

- ''FoxyProxy'' 
- ''HttpFox'' ''
- ''Proxy Tool''

== News ==

 
[http://www.computerweekly.com/blogs/open-source-insider/2011/10/free-software-testing-on-usb-for-students-to-web-developers-with-mantra.html Computer Weekly Article] 
[http://getmantra.com/forums/Thread-owasp-mantra-c0c0n-11-and-appseclatam-11-release OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release] 
[http://www.ekoparty.org/2011/workshops/owasp-mantra-security-framework.php Mantra at Ekoparty Security Conference] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Mantra at OWASP LatamTour - Buenos Aires, Argentina] 
Getting secure with Mantra: An open source penetration testing kit - 1. [http://www.computerworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss Computer World] 2. [http://www.cio.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ CIO] 3. [http://www.techworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ Tech World] 4. [http://www.cso.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss CSO] 
[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 Searchsecurity Screencast] 
[http://getmantra.com/forums/Thread-mantra-in-matriux-upcoming-release-leaked Mantra in Matriux Security Distribution] 
[http://getmantra.com/forums/Thread-mantra-in-backtrack-5 Mantra in Backtrack 5 - Penetration Testing Distribution] 
[http://www.facebook.com/photo.php?fbid=185544081485201&set=a.170788249627451.33033.170787489627527&type=1&ref=nf Mantra – Free and Open Source Security Framework' - published in India's first hacking magazine ClubHack Mag] 
[http://clubhack.com/2010/speakers/ ClubHACK 2010 Mantra release]

== Contributors ==

 
"It is purpose that created us, purpose that connects us, purpose that pulls us, that guides us, that drives us, that binds us, it is purpose that defines us." - Agent Smith 
'''Project Leaders''' 
[[User:Abhi_M_Balakrishnan|Abhi M Balakrishnan]] 
[[User:Yashartha_Chaturvedi|Yashartha Chaturvedi]] 
[[User:Gokul_C_Gopinath|Gokul C Gopinath]] 

'''Other Members''' 
[[User:Maximiliano_Soler|Maximiliano Soler]] 
Gopu C Gopinath 
Thomas Mackenzie 

== Download ==

 
" All things are difficult before they are easy." - Thomas Fuller 
'''OWASP Mantra Security Toolkit - Beta 0.81 code named Armada''' 

{|
|'''Platform'''
|'''Details'''
|'''Links'''
|-
|'''Linux 32 bit'''
|MD5: e4c94e433a2e99cad0d8bea4aaf9fc08
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%2032%20bit%20Linux%20fixed.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%2032%20bit%20Linux%20fixed.zip Mirror 2] [http://burnbit.com/torrent/184854/OWASP_Mantra_Armada_32_bit_Linux_fixed_zip Torrent]
|-
|'''Linux 64 bit'''
|MD5: 8e16d3fede90168e23fbd0489c58b80f
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%2064%20bit%20Linux%20fixed.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%2064%20bit%20Linux%20fixed.zip Mirror 2] [http://burnbit.com/torrent/184851/OWASP_Mantra_Armada_64_bit_Linux_fixed_zip Torrent]
|-
|'''Windows'''
|MD5: 80450610eb86871e68f410335cae5f01
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Win.exe/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Win.exe Mirror 2] [http://burnbit.com/download/183928/OWASP_Mantra_Armada_Win_exe Torrent]
|-
|'''Macintosh'''
|MD5: f256cf80a94ce960a90c441eb4b00ce0
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Mac.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Mac.zip Mirror 2] [http://burnbit.com/download/183927/OWASP_Mantra_Armada_Mac_zip Torrent]
|-
|'''Source'''
|MD5: af9a3b960b56a94a7c6227d62d674bea
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Source.7z/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Source.7z Mirror 2] [http://burnbit.com/torrent/183979/OWASP_Mantra_Armada_Source_7z Torrent]
|}

[[Category:OWASP_Download]]

== Project About ==

{{:Projects/OWASP Mantra - Security Framework | Project About}}

== Resources ==
 

'''Project Pamphlets''' 

[http://www.owasp.org/images/e/e4/OWASP_Mantra-An_Introduction.pdf Project Pamphlet 1] 

'''Project Presentations''' 

[http://www.owasp.org/index.php/File:OWASP_Mantra-An_Introduction.pptx Project Presentation 1] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Project Presentation 2] 

'''Text Tutorials''' 

[http://getmantra.com/forums/Thread-introducing-passiverecon-by-justin-morehouse Introducing PassiveRecon by Justin Morehouse] 
[http://getmantra.com/forums/Thread-introducing-groundspeed-by-felipe Introducing Groundspeed by Felipe] 
[http://getmantra.com/forums/Thread-introducing-link-sidebar-by-varun-n Introducing Link Sidebar by Varun N] 
[http://getmantra.com/forums/Thread-introducing-proxytool-by-robert-rade Introducing ProxyTool by Robert Rade] 
[http://getmantra.com/forums/Thread-introducing-httpfox-by-martin-theimer Introducing HttpFox by Martin Theimer] 
[http://getmantra.com/forums/Thread-how-to-make-your-own-search-bar-item How to make your own search bar item] 
[http://getmantra.com/forums/Thread-how-to-use-moc-crawler How to use MoC crawler] 
[http://getmantra.com/forums/Thread-switching-between-languages-and-locales Switching between languages and locales] 
[http://getmantra.com/forums/Thread-running-mantra-and-firefox-together Running Mantra and Firefox together] 
[http://getmantra.com/forums/Thread-login-form-bypass-using-mantra-security-toolkit Login Form Bypass using Mantra Security Toolkit] 
[http://getmantra.com/forums/Thread-advanced-sql-injection-tutorial-complete-website-rooting Advanced SQL Injection Tutorial - Complete website rooting] 
[http://getmantra.com/forums/Thread-manual-crawling Manual Crawling] 
[http://getmantra.com/forums/Thread-introducing-flagfox Introducing Flagfox] 

'''Video Tutorials''' 

[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 SearchSecurity Screencast] 
ClubHACK 2010 - [http://www.youtube.com/watch?v=GBFxVAM3DLQ 1] [http://www.youtube.com/watch?v=bKACEDWKeyM 2] [http://www.youtube.com/watch?v=qpVHWVOPHTk 3] 
[http://www.youtube.com/watch?v=yTbB42sR208 Broken Authentication Demonstration] 
[http://www.youtube.com/watch?v=o1WVx6eYE-M Broken Session Demonstration] 
[http://www.youtube.com/watch?v=vvPeskadF-s Insecure Direct Object References Demonstration] 
[http://www.youtube.com/watch?v=NK3S-nwiGwA Cross Site Scripting Demonstration] 
[http://www.youtube.com/watch?v=p94ssETMbQ0& Introduction + How to use Mantra Security Toolkit] 
[http://www.youtube.com/watch?v=fxHlthnVJpA Introduction to Mantra (Arabic)] 
[http://www.youtube.com/watch?v=exyUAGseifI Introducing FoxyProxy (Arabic)]
[http://www.youtube.com/watch?v=vFcY584Wmw0 OWASP Mantra - URL Shortener Script SQL Injection Vulnerability]
[http://www.youtube.com/watch?v=CRJkGZlV6Vk OWASP Mantra and LAMP Security CTF 6]
[http://www.youtube.com/watch?v=aPk5vCqh-2k OWASP Mantra and Who Wants to be a Millionaire]
[http://www.youtube.com/watch?v=0lPz24Z7Q_4 OWASP Mantra - One File CMS - Failure to Restrict URL Access]

==== Links ====
 
[http://www.getmantra.com/index.html Main Website] 
[http://www.getmantra.com/forums/ Discussion Forums] 
[http://www.facebook.com/getmantra/ Facebook Page] 
[http://getmantra.tumblr.com/ Tumblr] 
[http://twitter.com/getmantra Twitter] 
[http://vimeo.com/getmantra Vimeo] 
[http://sourceforge.net/projects/getmantra/ Sourceforge] 
[http://code.google.com/p/getmantra/ Google Code] 
[http://www.youtube.com/getmantra Youtube]
[http://mantralooks.blogspot.in/ Artworks]
[http://mantragallery.blogspot.com/ Wallpapers]

__NOTOC__ <headertabs />

[[Category:OWASP_Tool]] [[Category:OWASP_Alpha_Quality_Tool]] [[Category:OWASP_Project|Mantra - Security Framework]]
[[Category:OWASP Download]]

OWASP Mantra - Security Framework

2012-04-13T07:07:48Z

Yashartha Chaturvedi:

==== Main ====

= Overview =

[[Image:OWASP Mantra Security Framework.jpg|right|200px|OWASP Mantra Security Framework.jpg]] 

*Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software.

*Mantra is lite, flexible, portable and user friendly with a nice graphical user interface. You can carry it in memory cards, flash drives, CD/DVDs, etc. It can be run natively on Linux, Windows and Mac platforms. It can also be installed on to your system within minutes. Mantra is absolutely free of cost and takes no time for you to set up.

== Main Links ==

'''[http://getmantra.com/download/index.html Download Mantra - Security Framework]''' 

*[http://www.youtube.com/watch?v=GBFxVAM3DLQ Conference Video 1]
*[http://www.youtube.com/watch?v=bKACEDWKeyM Conference Video 2]
*[http://www.youtube.com/watch?v=qpVHWVOPHTk Conference Video 3]

*[http://chmag.in/article/feb2011/mantra-%E2%80%93-free-and-open-source-security-framework Article/Publication ]

 

= Project Goals =

#Create an ecosystem for hackers based on browser
#To bring the attention of security people to the potential of a browser based security platform
#Provide easy to use and portable platform for demonstrating common web based attacks( read training )
#To associate with other security tools/products to make a better environment. Eg:
##It can be a nice addition to security distribution OSs like OWASP Live CD
##It can be used to solve basic levels of CTF contests
##It can associate with projects like DVWA to showcase attacks
##It can bring functions like crawler, SQL injection scanner etc by installing extensions.

 

= Tools =
 " A sword never kills anybody; it is a tool in the killer's hand." - Lucius Annaeus Seneca 
Mantra is a powerful set of tools to make the attacker's task easier. The beta version of Mantra Security Toolkit contains following tools built onto it. Moreover Mantra follows the guidelines and structure of [http://firecat.fr/ FireCAT ] which makes it even more accessible. You can also always suggest any tools/ scripts that you would like see in the next release. 

== Tools ==
+'''Information Gathering'''

- ''Flagfox'' 
- ''JSView'' 
- ''PassiveRecon'' 
- ''Facebook search'' 
- ''People Search Engine'' 
- ''View Dependencies'' 
- ''Link Sidebar''

+'''Editors'''

- ''JSView'' 
- ''Firebug''

+'''Network Utilities'''

- ''FireFTP'' 
- ''DNS Cache'' 
- ''SQLite Manager'' 
- ''HTTP Fox'' 
- ''FireSSH''

+'''Miscellaneous'''

- ''Greasemonkey'' 
- ''Greasefire'' 
- ''CacheToggle'' 
- ''URL Flipper'' 
- ''Event Spy'' 
- ''Firebug Autocompleter'' 
- ''FirePHP'' 
- ''FireRainbow'' 
- ''Flashbug'' 
- ''Illuminations for Developers'' 
- ''In line Code Finder for Firebug'' 
- ''Inspect Context'' 
- ''Inspector Widget'' 
- ''Inspect This'' 
- ''Scriptish'' 
- ''Session Manager'' 
- ''Stacked Inspector''

+'''Application Auditing'''

- ''Hackbar'' 
- ''RESTClient'' 
- ''Tamper Data'' 
- ''Live HTTP Headers'' 
- ''RefControl'' 
- ''User Agent Switcher'' 
- ''Web Developer'' 
- ''DOM Inspector'' 
- ''Inspect This'' 
- ''Formfox'' 
- ''SQL Inject Me'' 
- ''XSS Me'' 
- ''Cookies Manager+'' 
- ''Firecookie'' 
- ''Autofill Forms'' 
- ''Cookie Monster'' 
- ''Fireforce'' 
- ''Groundspeed'' 
- ''Http Requester'' 
- ''Modify Headers'' 
- ''Poster'' 
- ''Ref Spoof'' 
- ''SeleniumExpertSeleniumIDE'' 
- ''SeleniumIDE'' 
- ''SOAClient'' 
- ''Websecurify''

+'''Proxy'''

- ''FoxyProxy'' 
- ''HttpFox'' ''
- ''Proxy Tool''

= News =
 
[http://www.computerweekly.com/blogs/open-source-insider/2011/10/free-software-testing-on-usb-for-students-to-web-developers-with-mantra.html Computer Weekly Article] 
[http://getmantra.com/forums/Thread-owasp-mantra-c0c0n-11-and-appseclatam-11-release OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release] 
[http://www.ekoparty.org/2011/workshops/owasp-mantra-security-framework.php Mantra at Ekoparty Security Conference] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Mantra at OWASP LatamTour - Buenos Aires, Argentina] 
Getting secure with Mantra: An open source penetration testing kit - 1. [http://www.computerworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss Computer World] 2. [http://www.cio.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ CIO] 3. [http://www.techworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ Tech World] 4. [http://www.cso.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss CSO] 
[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 Searchsecurity Screencast] 
[http://getmantra.com/forums/Thread-mantra-in-matriux-upcoming-release-leaked Mantra in Matriux Security Distribution] 
[http://getmantra.com/forums/Thread-mantra-in-backtrack-5 Mantra in Backtrack 5 - Penetration Testing Distribution] 
[http://www.facebook.com/photo.php?fbid=185544081485201&set=a.170788249627451.33033.170787489627527&type=1&ref=nf Mantra – Free and Open Source Security Framework' - published in India's first hacking magazine ClubHack Mag] 
[http://clubhack.com/2010/speakers/ ClubHACK 2010 Mantra release]

= Contributors =
 
"It is purpose that created us, purpose that connects us, purpose that pulls us, that guides us, that drives us, that binds us, it is purpose that defines us." - Agent Smith 
'''Project Leaders''' 
[[User:Abhi_M_Balakrishnan|Abhi M Balakrishnan]] 
[[User:Yashartha_Chaturvedi|Yashartha Chaturvedi]] 
[[User:Gokul_C_Gopinath|Gokul C Gopinath]] 

'''Other Members''' 
[[User:Maximiliano_Soler|Maximiliano Soler]] 
Gopu C Gopinath 

= Download =
 
" All things are difficult before they are easy." - Thomas Fuller 
'''OWASP Mantra Security Toolkit - Beta 0.81 code named Armada''' 

{|
|'''Platform'''
|'''Details'''
|'''Links'''
|-
|'''Linux 32 bit'''
|MD5: e4c94e433a2e99cad0d8bea4aaf9fc08
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%2032%20bit%20Linux%20fixed.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%2032%20bit%20Linux%20fixed.zip Mirror 2] [http://burnbit.com/torrent/184854/OWASP_Mantra_Armada_32_bit_Linux_fixed_zip Torrent]
|-
|'''Linux 64 bit'''
|MD5: 8e16d3fede90168e23fbd0489c58b80f
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%2064%20bit%20Linux%20fixed.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%2064%20bit%20Linux%20fixed.zip Mirror 2] [http://burnbit.com/torrent/184851/OWASP_Mantra_Armada_64_bit_Linux_fixed_zip Torrent]
|-
|'''Windows'''
|MD5: 80450610eb86871e68f410335cae5f01
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Win.exe/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Win.exe Mirror 2] [http://burnbit.com/download/183928/OWASP_Mantra_Armada_Win_exe Torrent]
|-
|'''Macintosh'''
|MD5: f256cf80a94ce960a90c441eb4b00ce0
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Mac.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Mac.zip Mirror 2] [http://burnbit.com/download/183927/OWASP_Mantra_Armada_Mac_zip Torrent]
|-
|'''Source'''
|MD5: af9a3b960b56a94a7c6227d62d674bea
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Source.7z/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Source.7z Mirror 2] [http://burnbit.com/torrent/183979/OWASP_Mantra_Armada_Source_7z Torrent]
|}

[[Category:OWASP_Download]]

= Project About =

{{:Projects/OWASP Mantra - Security Framework | Project About}}

= Resources =
 

'''Project Pamphlets''' 

[http://www.owasp.org/images/e/e4/OWASP_Mantra-An_Introduction.pdf Project Pamphlet 1] 

'''Project Presentations''' 

[http://www.owasp.org/index.php/File:OWASP_Mantra-An_Introduction.pptx Project Presentation 1] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Project Presentation 2] 

'''Text Tutorials''' 

[http://getmantra.com/forums/Thread-introducing-passiverecon-by-justin-morehouse Introducing PassiveRecon by Justin Morehouse] 
[http://getmantra.com/forums/Thread-introducing-groundspeed-by-felipe Introducing Groundspeed by Felipe] 
[http://getmantra.com/forums/Thread-introducing-link-sidebar-by-varun-n Introducing Link Sidebar by Varun N] 
[http://getmantra.com/forums/Thread-introducing-proxytool-by-robert-rade Introducing ProxyTool by Robert Rade] 
[http://getmantra.com/forums/Thread-introducing-httpfox-by-martin-theimer Introducing HttpFox by Martin Theimer] 
[http://getmantra.com/forums/Thread-how-to-make-your-own-search-bar-item How to make your own search bar item] 
[http://getmantra.com/forums/Thread-how-to-use-moc-crawler How to use MoC crawler] 
[http://getmantra.com/forums/Thread-switching-between-languages-and-locales Switching between languages and locales] 
[http://getmantra.com/forums/Thread-running-mantra-and-firefox-together Running Mantra and Firefox together] 
[http://getmantra.com/forums/Thread-login-form-bypass-using-mantra-security-toolkit Login Form Bypass using Mantra Security Toolkit] 
[http://getmantra.com/forums/Thread-advanced-sql-injection-tutorial-complete-website-rooting Advanced SQL Injection Tutorial - Complete website rooting] 
[http://getmantra.com/forums/Thread-manual-crawling Manual Crawling] 
[http://getmantra.com/forums/Thread-introducing-flagfox Introducing Flagfox] 

'''Video Tutorials''' 

[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 SearchSecurity Screencast] 
ClubHACK 2010 - [http://www.youtube.com/watch?v=GBFxVAM3DLQ 1] [http://www.youtube.com/watch?v=bKACEDWKeyM 2] [http://www.youtube.com/watch?v=qpVHWVOPHTk 3] 
[http://www.youtube.com/watch?v=yTbB42sR208 Broken Authentication Demonstration] 
[http://www.youtube.com/watch?v=o1WVx6eYE-M Broken Session Demonstration] 
[http://www.youtube.com/watch?v=vvPeskadF-s Insecure Direct Object References Demonstration] 
[http://www.youtube.com/watch?v=NK3S-nwiGwA Cross Site Scripting Demonstration] 
[http://www.youtube.com/watch?v=p94ssETMbQ0& Introduction + How to use Mantra Security Toolkit] 
[http://www.youtube.com/watch?v=fxHlthnVJpA Introduction to Mantra (Arabic)] 
[http://www.youtube.com/watch?v=exyUAGseifI Introducing FoxyProxy (Arabic)]
[http://www.youtube.com/watch?v=vFcY584Wmw0 OWASP Mantra - URL Shortener Script SQL Injection Vulnerability]
[http://www.youtube.com/watch?v=CRJkGZlV6Vk OWASP Mantra and LAMP Security CTF 6]
[http://www.youtube.com/watch?v=aPk5vCqh-2k OWASP Mantra and Who Wants to be a Millionaire]
[http://www.youtube.com/watch?v=0lPz24Z7Q_4 OWASP Mantra - One File CMS - Failure to Restrict URL Access]

==== Links ====
 
[http://www.getmantra.com/index.html Main Website] 
[http://www.getmantra.com/forums/ Discussion Forums] 
[http://www.facebook.com/getmantra/ Facebook Page] 
[http://getmantra.tumblr.com/ Tumblr] 
[http://twitter.com/getmantra Twitter] 
[http://vimeo.com/getmantra Vimeo] 
[http://sourceforge.net/projects/getmantra/ Sourceforge] 
[http://code.google.com/p/getmantra/ Google Code] 
[http://www.youtube.com/getmantra Youtube]
[http://mantralooks.blogspot.in/ Artworks]
[http://mantragallery.blogspot.com/ Wallpapers]

__NOTOC__ <headertabs />

[[Category:OWASP_Tool]] [[Category:OWASP_Alpha_Quality_Tool]] [[Category:OWASP_Project|Mantra - Security Framework]]
[[Category:OWASP Download]]

OWASP Mantra - Security Framework

2012-01-13T06:50:05Z

Yashartha Chaturvedi:

==== Main ====

= Overview =

[[Image:OWASP Mantra Security Framework.jpg|right|200px|OWASP Mantra Security Framework.jpg]] 

*Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software.
*Mantra is lite, flexible, portable and user friendly with a nice graphical user interface. You can carry it in memory cards, flash drives, CD/DVDs, etc. It can be run natively on Linux, Windows and Mac platforms. It can also be installed on to your system within minutes. Mantra is absolutely free of cost and takes no time for you to set up.

== Main Links ==

'''[http://getmantra.com/download/index.html Download Mantra - Security Framework]''' 

*[http://www.youtube.com/watch?v=GBFxVAM3DLQ Conference Video 1]
*[http://www.youtube.com/watch?v=bKACEDWKeyM Conference Video 2]
*[http://www.youtube.com/watch?v=qpVHWVOPHTk Conference Video 3]

*[http://chmag.in/article/feb2011/mantra-%E2%80%93-free-and-open-source-security-framework Article/Publication ]

 

= Project Goals =

#Create an ecosystem for hackers based on browser
#To bring the attention of security people to the potential of a browser based security platform
#Provide easy to use and portable platform for demonstrating common web based attacks( read training )
#To associate with other security tools/products to make a better environment. Eg:
##It can be a nice addition to security distribution OSs like OWASP Live CD
##It can be used to solve basic levels of CTF contests
##It can associate with projects like DVWA to showcase attacks
##It can bring functions like crawler, SQL injection scanner etc by installing extensions.

 

= Tools =
 " A sword never kills anybody; it is a tool in the killer's hand." - Lucius Annaeus Seneca 
Mantra is a powerful set of tools to make the attacker's task easier. The beta version of Mantra Security Toolkit contains following tools built onto it. Moreover Mantra follows the guidelines and structure of [http://firecat.fr/ FireCAT ] which makes it even more accessible. You can also always suggest any tools/ scripts that you would like see in the next release. 

== Tools ==
+'''Information Gathering'''

- ''Flagfox'' 
- ''JSView'' 
- ''PassiveRecon'' 
- ''Facebook search'' 
- ''People Search Engine'' 
- ''View Dependencies'' 
- ''Link Sidebar''

+'''Editors'''

- ''JSView'' 
- ''Firebug''

+'''Network Utilities'''

- ''FireFTP'' 
- ''DNS Cache'' 
- ''SQLite Manager'' 
- ''HTTP Fox'' 
- ''FireSSH''

+'''Miscellaneous'''

- ''Greasemonkey'' 
- ''Greasefire'' 
- ''CacheToggle'' 
- ''URL Flipper'' 
- ''Event Spy'' 
- ''Firebug Autocompleter'' 
- ''FirePHP'' 
- ''FireRainbow'' 
- ''Flashbug'' 
- ''Illuminations for Developers'' 
- ''In line Code Finder for Firebug'' 
- ''Inspect Context'' 
- ''Inspector Widget'' 
- ''Inspect This'' 
- ''Scriptish'' 
- ''Session Manager'' 
- ''Stacked Inspector''

+'''Application Auditing'''

- ''Hackbar'' 
- ''RESTClient'' 
- ''Tamper Data'' 
- ''Live HTTP Headers'' 
- ''RefControl'' 
- ''User Agent Switcher'' 
- ''Web Developer'' 
- ''DOM Inspector'' 
- ''Inspect This'' 
- ''Formfox'' 
- ''SQL Inject Me'' 
- ''XSS Me'' 
- ''Cookies Manager+'' 
- ''Firecookie'' 
- ''Autofill Forms'' 
- ''Cookie Monster'' 
- ''Fireforce'' 
- ''Groundspeed'' 
- ''Http Requester'' 
- ''Modify Headers'' 
- ''Poster'' 
- ''Ref Spoof'' 
- ''SeleniumExpertSeleniumIDE'' 
- ''SeleniumIDE'' 
- ''SOAClient'' 
- ''Websecurify''

+'''Proxy'''

- ''FoxyProxy'' 
- ''HttpFox'' ''
- ''Proxy Tool''

= News =
 
[http://www.computerweekly.com/blogs/open-source-insider/2011/10/free-software-testing-on-usb-for-students-to-web-developers-with-mantra.html Computer Weekly Article] 
[http://getmantra.com/forums/Thread-owasp-mantra-c0c0n-11-and-appseclatam-11-release OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release] 
[http://www.ekoparty.org/2011/workshops/owasp-mantra-security-framework.php Mantra at Ekoparty Security Conference] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Mantra at OWASP LatamTour - Buenos Aires, Argentina] 
Getting secure with Mantra: An open source penetration testing kit - 1. [http://www.computerworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss Computer World] 2. [http://www.cio.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ CIO] 3. [http://www.techworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ Tech World] 4. [http://www.cso.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss CSO] 
[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 Searchsecurity Screencast] 
[http://getmantra.com/forums/Thread-mantra-in-matriux-upcoming-release-leaked Mantra in Matriux Security Distribution] 
[http://getmantra.com/forums/Thread-mantra-in-backtrack-5 Mantra in Backtrack 5 - Penetration Testing Distribution] 
[http://www.facebook.com/photo.php?fbid=185544081485201&set=a.170788249627451.33033.170787489627527&type=1&ref=nf Mantra – Free and Open Source Security Framework' - published in India's first hacking magazine ClubHack Mag] 
[http://clubhack.com/2010/speakers/ ClubHACK 2010 Mantra release]

= Contributors =
 
"It is purpose that created us, purpose that connects us, purpose that pulls us, that guides us, that drives us, that binds us, it is purpose that defines us." - Agent Smith 
'''Project Leaders''' 
[[User:Abhi_M_Balakrishnan|Abhi M Balakrishnan]] 
[[User:Yashartha_Chaturvedi|Yashartha Chaturvedi]] 
[[User:Gokul_C_Gopinath|Gokul C Gopinath]] 

'''Other Members''' 
[[User:Maximiliano_Soler|Maximiliano Soler]] 
Gopu C Gopinath 

= Download =
 
" All things are difficult before they are easy." - Thomas Fuller 
'''OWASP Mantra Security Toolkit - Beta 0.81 code named Armada''' 

{|
|'''Platform'''
|'''Details'''
|'''Links'''
|-
|'''Linux 32 bit'''
|MD5: e4c94e433a2e99cad0d8bea4aaf9fc08
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%2032%20bit%20Linux%20fixed.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%2032%20bit%20Linux%20fixed.zip Mirror 2] [http://burnbit.com/torrent/184854/OWASP_Mantra_Armada_32_bit_Linux_fixed_zip Torrent]
|-
|'''Linux 64 bit'''
|MD5: 8e16d3fede90168e23fbd0489c58b80f
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%2064%20bit%20Linux%20fixed.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%2064%20bit%20Linux%20fixed.zip Mirror 2] [http://burnbit.com/torrent/184851/OWASP_Mantra_Armada_64_bit_Linux_fixed_zip Torrent]
|-
|'''Windows'''
|MD5: 80450610eb86871e68f410335cae5f01
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Win.exe/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Win.exe Mirror 2] [http://burnbit.com/download/183928/OWASP_Mantra_Armada_Win_exe Torrent]
|-
|'''Macintosh'''
|MD5: f256cf80a94ce960a90c441eb4b00ce0
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Mac.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Mac.zip Mirror 2] [http://burnbit.com/download/183927/OWASP_Mantra_Armada_Mac_zip Torrent]
|-
|'''Source'''
|MD5: af9a3b960b56a94a7c6227d62d674bea
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Source.7z/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Source.7z Mirror 2] [http://burnbit.com/torrent/183979/OWASP_Mantra_Armada_Source_7z Torrent]
|}

[[Category:OWASP_Download]]

= Project About =

{{:Projects/OWASP Mantra - Security Framework | Project About}}

= Resources =
 

'''Project Pamphlets''' 

[http://www.owasp.org/images/e/e4/OWASP_Mantra-An_Introduction.pdf Project Pamphlet 1] 

'''Project Presentations''' 

[http://www.owasp.org/index.php/File:OWASP_Mantra-An_Introduction.pptx Project Presentation 1] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Project Presentation 2] 

'''Text Tutorials''' 

[http://getmantra.com/forums/Thread-introducing-passiverecon-by-justin-morehouse Introducing PassiveRecon by Justin Morehouse] 
[http://getmantra.com/forums/Thread-introducing-groundspeed-by-felipe Introducing Groundspeed by Felipe] 
[http://getmantra.com/forums/Thread-introducing-link-sidebar-by-varun-n Introducing Link Sidebar by Varun N] 
[http://getmantra.com/forums/Thread-introducing-proxytool-by-robert-rade Introducing ProxyTool by Robert Rade] 
[http://getmantra.com/forums/Thread-introducing-httpfox-by-martin-theimer Introducing HttpFox by Martin Theimer] 
[http://getmantra.com/forums/Thread-how-to-make-your-own-search-bar-item How to make your own search bar item] 
[http://getmantra.com/forums/Thread-how-to-use-moc-crawler How to use MoC crawler] 
[http://getmantra.com/forums/Thread-switching-between-languages-and-locales Switching between languages and locales] 
[http://getmantra.com/forums/Thread-running-mantra-and-firefox-together Running Mantra and Firefox together] 
[http://getmantra.com/forums/Thread-login-form-bypass-using-mantra-security-toolkit Login Form Bypass using Mantra Security Toolkit] 
[http://getmantra.com/forums/Thread-advanced-sql-injection-tutorial-complete-website-rooting Advanced SQL Injection Tutorial - Complete website rooting] 
[http://getmantra.com/forums/Thread-manual-crawling Manual Crawling] 
[http://getmantra.com/forums/Thread-introducing-flagfox Introducing Flagfox] 

'''Video Tutorials''' 

[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 SearchSecurity Screencast] 
ClubHACK 2010 - [http://www.youtube.com/watch?v=GBFxVAM3DLQ 1] [http://www.youtube.com/watch?v=bKACEDWKeyM 2] [http://www.youtube.com/watch?v=qpVHWVOPHTk 3] 
[http://www.youtube.com/watch?v=yTbB42sR208 Broken Authentication Demonstration] 
[http://www.youtube.com/watch?v=o1WVx6eYE-M Broken Session Demonstration] 
[http://www.youtube.com/watch?v=vvPeskadF-s Insecure Direct Object References Demonstration] 
[http://www.youtube.com/watch?v=NK3S-nwiGwA Cross Site Scripting Demonstration] 
[http://www.youtube.com/watch?v=p94ssETMbQ0& Introduction + How to use Mantra Security Toolkit] 
[http://www.youtube.com/watch?v=fxHlthnVJpA Introduction to Mantra (Arabic)] 
[http://www.youtube.com/watch?v=exyUAGseifI Introducing FoxyProxy (Arabic)]

==== Links ====
 
[http://www.getmantra.com/index.html Main Website] 
[http://www.getmantra.com/forums/ Discussion Forums] 
[http://www.facebook.com/getmantra/ Facebook Page] 
[http://getmantra.tumblr.com/ Tumblr] 
[http://twitter.com/getmantra Twitter] 
[http://vimeo.com/getmantra Vimeo] 
[http://sourceforge.net/projects/getmantra/ Sourceforge] 
[http://code.google.com/p/getmantra/ Google Code] 
[http://www.youtube.com/getmantra Youtube]

__NOTOC__ <headertabs />

[[Category:OWASP_Tool]] [[Category:OWASP_Alpha_Quality_Tool]] [[Category:OWASP_Project|Mantra - Security Framework]]
[[Category:OWASP Download]]

OWASP Mantra - Security Framework

2012-01-13T06:08:22Z

Yashartha Chaturvedi:

==== Main ====

= Overview =

[[Image:OWASP Mantra Security Framework.jpg|right|200px|OWASP Mantra Security Framework.jpg]] 

*Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software.
*Mantra is lite, flexible, portable and user friendly with a nice graphical user interface. You can carry it in memory cards, flash drives, CD/DVDs, etc. It can be run natively on Linux, Windows and Mac platforms. It can also be installed on to your system within minutes. Mantra is absolutely free of cost and takes no time for you to set up.

== Main Links ==

'''[http://getmantra.com/download/index.html Download Mantra - Security Framework]''' 

*[http://www.youtube.com/watch?v=GBFxVAM3DLQ Conference Video 1]
*[http://www.youtube.com/watch?v=bKACEDWKeyM Conference Video 2]
*[http://www.youtube.com/watch?v=qpVHWVOPHTk Conference Video 3]

*[http://chmag.in/article/feb2011/mantra-%E2%80%93-free-and-open-source-security-framework Article/Publication ]

 

= Project Goals =

#Create an ecosystem for hackers based on browser
#To bring the attention of security people to the potential of a browser based security platform
#Provide easy to use and portable platform for demonstrating common web based attacks( read training )
#To associate with other security tools/products to make a better environment. Eg:
##It can be a nice addition to security distribution OSs like OWASP Live CD
##It can be used to solve basic levels of CTF contests
##It can associate with projects like DVWA to showcase attacks
##It can bring functions like crawler, SQL injection scanner etc by installing extensions.

 

= Tools =
 " A sword never kills anybody; it is a tool in the killer's hand." - Lucius Annaeus Seneca 
Mantra is a powerful set of tools to make the attacker's task easier. The beta version of Mantra Security Toolkit contains following tools built onto it. Moreover Mantra follows the guidelines and structure of [http://firecat.fr/ FireCAT ] which makes it even more accessible. You can also always suggest any tools/ scripts that you would like see in the next release. 

== Tools ==
+'''Information Gathering'''

- ''Flagfox'' 
- ''JSView'' 
- ''PassiveRecon'' 
- ''Facebook search'' 
- ''People Search Engine'' 
- ''View Dependencies'' 
- ''Link Sidebar''

+'''Editors'''

- ''JSView'' 
- ''Firebug''

+'''Network Utilities'''

- ''FireFTP'' 
- ''DNS Cache'' 
- ''SQLite Manager'' 
- ''HTTP Fox'' 
- ''FireSSH''

+'''Miscellaneous'''

- ''Greasemonkey'' 
- ''Greasefire'' 
- ''CacheToggle'' 
- ''URL Flipper'' 
- ''Event Spy'' 
- ''Firebug Autocompleter'' 
- ''FirePHP'' 
- ''FireRainbow'' 
- ''Flashbug'' 
- ''Illuminations for Developers'' 
- ''In line Code Finder for Firebug'' 
- ''Inspect Context'' 
- ''Inspector Widget'' 
- ''Inspect This'' 
- ''Scriptish'' 
- ''Session Manager'' 
- ''Stacked Inspector''

+'''Application Auditing'''

- ''Hackbar'' 
- ''RESTClient'' 
- ''Tamper Data'' 
- ''Live HTTP Headers'' 
- ''RefControl'' 
- ''User Agent Switcher'' 
- ''Web Developer'' 
- ''DOM Inspector'' 
- ''Inspect This'' 
- ''Formfox'' 
- ''SQL Inject Me'' 
- ''XSS Me'' 
- ''Cookies Manager+'' 
- ''Firecookie'' 
- ''Autofill Forms'' 
- ''Cookie Monster'' 
- ''Fireforce'' 
- ''Groundspeed'' 
- ''Http Requester'' 
- ''Modify Headers'' 
- ''Poster'' 
- ''Ref Spoof'' 
- ''SeleniumExpertSeleniumIDE'' 
- ''SeleniumIDE'' 
- ''SOAClient'' 
- ''Websecurify''

+'''Proxy'''

- ''FoxyProxy'' 
- ''HttpFox'' ''
- ''Proxy Tool''

= News =
 
[http://www.computerweekly.com/blogs/open-source-insider/2011/10/free-software-testing-on-usb-for-students-to-web-developers-with-mantra.html Computer Weekly Article] 
[http://getmantra.com/forums/Thread-owasp-mantra-c0c0n-11-and-appseclatam-11-release OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release] 
[http://www.ekoparty.org/2011/workshops/owasp-mantra-security-framework.php Mantra at Ekoparty Security Conference] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Mantra at OWASP LatamTour - Buenos Aires, Argentina] 
Getting secure with Mantra: An open source penetration testing kit - 1. [http://www.computerworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss Computer World] 2. [http://www.cio.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ CIO] 3. [http://www.techworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ Tech World] 4. [http://www.cso.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss CSO] 
[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 Searchsecurity Screencast] 
[http://getmantra.com/forums/Thread-mantra-in-matriux-upcoming-release-leaked Mantra in Matriux Security Distribution] 
[http://getmantra.com/forums/Thread-mantra-in-backtrack-5 Mantra in Backtrack 5 - Penetration Testing Distribution] 
[http://www.facebook.com/photo.php?fbid=185544081485201&set=a.170788249627451.33033.170787489627527&type=1&ref=nf Mantra – Free and Open Source Security Framework' - published in India's first hacking magazine ClubHack Mag] 
[http://clubhack.com/2010/speakers/ ClubHACK 2010 Mantra release]

= Contributors =
 
"It is purpose that created us, purpose that connects us, purpose that pulls us, that guides us, that drives us, that binds us, it is purpose that defines us." - Agent Smith 
'''Project Leaders''' 
[[User:Abhi_M_Balakrishnan|Abhi M Balakrishnan]] 
[[User:Yashartha_Chaturvedi|Yashartha Chaturvedi]] 
[[User:Gokul_C_Gopinath|Gokul C Gopinath]] 

'''Other Members''' 
[[User:Maximiliano_Soler|Maximiliano Soler]] 
Gopu C Gopinath 

= Download =
 
" All things are difficult before they are easy." - Thomas Fuller 
'''OWASP Mantra Security Toolkit - Beta 0.81 code named Armada''' 

{|
|'''Platform'''
|'''Details'''
|'''Links'''
|-
|'''Linux 32 bit'''
|MD5: e4c94e433a2e99cad0d8bea4aaf9fc08
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%2032%20bit%20Linux%20fixed.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%2032%20bit%20Linux%20fixed.zip Mirror 2] [http://burnbit.com/torrent/184854/OWASP_Mantra_Armada_32_bit_Linux_fixed_zip Torrent]
|-
|'''Linux 64 bit'''
|MD5: 2b39fcaf4ad7a57d9f4b8992938430a8
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%2064%20bit%20Linux.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%2064%20bit%20Linux.zip Mirror 2] [http://burnbit.com/download/183926/OWASP_Mantra_Armada_64_bit_Linux_zip Torrent]
|-
|'''Windows'''
|MD5: 80450610eb86871e68f410335cae5f01
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Win.exe/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Win.exe Mirror 2] [http://burnbit.com/download/183928/OWASP_Mantra_Armada_Win_exe Torrent]
|-
|'''Macintosh'''
|MD5: f256cf80a94ce960a90c441eb4b00ce0
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Mac.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Mac.zip Mirror 2] [http://burnbit.com/download/183927/OWASP_Mantra_Armada_Mac_zip Torrent]
|-
|'''Source'''
|MD5: af9a3b960b56a94a7c6227d62d674bea
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Source.7z/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Source.7z Mirror 2] [http://burnbit.com/torrent/183979/OWASP_Mantra_Armada_Source_7z Torrent]
|}

[[Category:OWASP_Download]]

= Project About =

{{:Projects/OWASP Mantra - Security Framework | Project About}}

= Resources =
 

'''Project Pamphlets''' 

[http://www.owasp.org/images/e/e4/OWASP_Mantra-An_Introduction.pdf Project Pamphlet 1] 

'''Project Presentations''' 

[http://www.owasp.org/index.php/File:OWASP_Mantra-An_Introduction.pptx Project Presentation 1] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Project Presentation 2] 

'''Text Tutorials''' 

[http://getmantra.com/forums/Thread-introducing-passiverecon-by-justin-morehouse Introducing PassiveRecon by Justin Morehouse] 
[http://getmantra.com/forums/Thread-introducing-groundspeed-by-felipe Introducing Groundspeed by Felipe] 
[http://getmantra.com/forums/Thread-introducing-link-sidebar-by-varun-n Introducing Link Sidebar by Varun N] 
[http://getmantra.com/forums/Thread-introducing-proxytool-by-robert-rade Introducing ProxyTool by Robert Rade] 
[http://getmantra.com/forums/Thread-introducing-httpfox-by-martin-theimer Introducing HttpFox by Martin Theimer] 
[http://getmantra.com/forums/Thread-how-to-make-your-own-search-bar-item How to make your own search bar item] 
[http://getmantra.com/forums/Thread-how-to-use-moc-crawler How to use MoC crawler] 
[http://getmantra.com/forums/Thread-switching-between-languages-and-locales Switching between languages and locales] 
[http://getmantra.com/forums/Thread-running-mantra-and-firefox-together Running Mantra and Firefox together] 
[http://getmantra.com/forums/Thread-login-form-bypass-using-mantra-security-toolkit Login Form Bypass using Mantra Security Toolkit] 
[http://getmantra.com/forums/Thread-advanced-sql-injection-tutorial-complete-website-rooting Advanced SQL Injection Tutorial - Complete website rooting] 
[http://getmantra.com/forums/Thread-manual-crawling Manual Crawling] 
[http://getmantra.com/forums/Thread-introducing-flagfox Introducing Flagfox] 

'''Video Tutorials''' 

[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 SearchSecurity Screencast] 
ClubHACK 2010 - [http://www.youtube.com/watch?v=GBFxVAM3DLQ 1] [http://www.youtube.com/watch?v=bKACEDWKeyM 2] [http://www.youtube.com/watch?v=qpVHWVOPHTk 3] 
[http://www.youtube.com/watch?v=yTbB42sR208 Broken Authentication Demonstration] 
[http://www.youtube.com/watch?v=o1WVx6eYE-M Broken Session Demonstration] 
[http://www.youtube.com/watch?v=vvPeskadF-s Insecure Direct Object References Demonstration] 
[http://www.youtube.com/watch?v=NK3S-nwiGwA Cross Site Scripting Demonstration] 
[http://www.youtube.com/watch?v=p94ssETMbQ0& Introduction + How to use Mantra Security Toolkit] 
[http://www.youtube.com/watch?v=fxHlthnVJpA Introduction to Mantra (Arabic)] 
[http://www.youtube.com/watch?v=exyUAGseifI Introducing FoxyProxy (Arabic)]

==== Links ====
 
[http://www.getmantra.com/index.html Main Website] 
[http://www.getmantra.com/forums/ Discussion Forums] 
[http://www.facebook.com/getmantra/ Facebook Page] 
[http://getmantra.tumblr.com/ Tumblr] 
[http://twitter.com/getmantra Twitter] 
[http://vimeo.com/getmantra Vimeo] 
[http://sourceforge.net/projects/getmantra/ Sourceforge] 
[http://code.google.com/p/getmantra/ Google Code] 
[http://www.youtube.com/getmantra Youtube]

__NOTOC__ <headertabs />

[[Category:OWASP_Tool]] [[Category:OWASP_Alpha_Quality_Tool]] [[Category:OWASP_Project|Mantra - Security Framework]]
[[Category:OWASP Download]]

OWASP Mantra - Security Framework

2011-12-30T20:43:51Z

Yashartha Chaturvedi:

==== Main ====

= Overview =

[[Image:OWASP Mantra Security Framework.jpg|right|200px|OWASP Mantra Security Framework.jpg]] 

*Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software.
*Mantra is lite, flexible, portable and user friendly with a nice graphical user interface. You can carry it in memory cards, flash drives, CD/DVDs, etc. It can be run natively on Linux, Windows and Mac platforms. It can also be installed on to your system within minutes. Mantra is absolutely free of cost and takes no time for you to set up.

== Main Links ==

'''[http://getmantra.com/download/index.html Download Mantra - Security Framework]''' 

*[http://www.youtube.com/watch?v=GBFxVAM3DLQ Conference Video 1]
*[http://www.youtube.com/watch?v=bKACEDWKeyM Conference Video 2]
*[http://www.youtube.com/watch?v=qpVHWVOPHTk Conference Video 3]

*[http://chmag.in/article/feb2011/mantra-%E2%80%93-free-and-open-source-security-framework Article/Publication ]

 

= Project Goals =

#Create an ecosystem for hackers based on browser
#To bring the attention of security people to the potential of a browser based security platform
#Provide easy to use and portable platform for demonstrating common web based attacks( read training )
#To associate with other security tools/products to make a better environment. Eg:
##It can be a nice addition to security distribution OSs like OWASP Live CD
##It can be used to solve basic levels of CTF contests
##It can associate with projects like DVWA to showcase attacks
##It can bring functions like crawler, SQL injection scanner etc by installing extensions.

 

= Tools =
 " A sword never kills anybody; it is a tool in the killer's hand." - Lucius Annaeus Seneca 
Mantra is a powerful set of tools to make the attacker's task easier. The beta version of Mantra Security Toolkit contains following tools built onto it. Moreover Mantra follows the guidelines and structure of [http://firecat.fr/ FireCAT ] which makes it even more accessible. You can also always suggest any tools/ scripts that you would like see in the next release. 

== Tools ==
+'''Information Gathering'''

- ''Flagfox'' 
- ''JSView'' 
- ''PassiveRecon'' 
- ''Facebook search'' 
- ''People Search Engine'' 
- ''View Dependencies'' 
- ''Link Sidebar''

+'''Editors'''

- ''JSView'' 
- ''Firebug''

+'''Network Utilities'''

- ''FireFTP'' 
- ''DNS Cache'' 
- ''SQLite Manager'' 
- ''HTTP Fox'' 
- ''FireSSH''

+'''Miscellaneous'''

- ''Greasemonkey'' 
- ''Greasefire'' 
- ''CacheToggle'' 
- ''URL Flipper'' 
- ''Event Spy'' 
- ''Firebug Autocompleter'' 
- ''FirePHP'' 
- ''FireRainbow'' 
- ''Flashbug'' 
- ''Illuminations for Developers'' 
- ''In line Code Finder for Firebug'' 
- ''Inspect Context'' 
- ''Inspector Widget'' 
- ''Inspect This'' 
- ''Scriptish'' 
- ''Session Manager'' 
- ''Stacked Inspector''

+'''Application Auditing'''

- ''Hackbar'' 
- ''RESTClient'' 
- ''Tamper Data'' 
- ''Live HTTP Headers'' 
- ''RefControl'' 
- ''User Agent Switcher'' 
- ''Web Developer'' 
- ''DOM Inspector'' 
- ''Inspect This'' 
- ''Formfox'' 
- ''SQL Inject Me'' 
- ''XSS Me'' 
- ''Cookies Manager+'' 
- ''Firecookie'' 
- ''Autofill Forms'' 
- ''Cookie Monster'' 
- ''Fireforce'' 
- ''Groundspeed'' 
- ''Http Requester'' 
- ''Modify Headers'' 
- ''Poster'' 
- ''Ref Spoof'' 
- ''SeleniumExpertSeleniumIDE'' 
- ''SeleniumIDE'' 
- ''SOAClient'' 
- ''Websecurify''

+'''Proxy'''

- ''FoxyProxy'' 
- ''HttpFox'' ''
- ''Proxy Tool''

= News =
 
[http://www.computerweekly.com/blogs/open-source-insider/2011/10/free-software-testing-on-usb-for-students-to-web-developers-with-mantra.html Computer Weekly Article] 
[http://getmantra.com/forums/Thread-owasp-mantra-c0c0n-11-and-appseclatam-11-release OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release] 
[http://www.ekoparty.org/2011/workshops/owasp-mantra-security-framework.php Mantra at Ekoparty Security Conference] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Mantra at OWASP LatamTour - Buenos Aires, Argentina] 
Getting secure with Mantra: An open source penetration testing kit - 1. [http://www.computerworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss Computer World] 2. [http://www.cio.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ CIO] 3. [http://www.techworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ Tech World] 4. [http://www.cso.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss CSO] 
[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 Searchsecurity Screencast] 
[http://getmantra.com/forums/Thread-mantra-in-matriux-upcoming-release-leaked Mantra in Matriux Security Distribution] 
[http://getmantra.com/forums/Thread-mantra-in-backtrack-5 Mantra in Backtrack 5 - Penetration Testing Distribution] 
[http://www.facebook.com/photo.php?fbid=185544081485201&set=a.170788249627451.33033.170787489627527&type=1&ref=nf Mantra – Free and Open Source Security Framework' - published in India's first hacking magazine ClubHack Mag] 
[http://clubhack.com/2010/speakers/ ClubHACK 2010 Mantra release]

= Contributors =
 
"It is purpose that created us, purpose that connects us, purpose that pulls us, that guides us, that drives us, that binds us, it is purpose that defines us." - Agent Smith 
'''Project Leaders''' 
[[User:Abhi_M_Balakrishnan|Abhi M Balakrishnan]] 
[[User:Yashartha_Chaturvedi|Yashartha Chaturvedi]] 
[[User:Gokul_C_Gopinath|Gokul C Gopinath]] 

'''Other Members''' 
[[User:Maximiliano_Soler|Maximiliano Soler]] 
Gopu C Gopinath 

= Download =
 
" All things are difficult before they are easy." - Thomas Fuller 
'''OWASP Mantra Security Toolkit - Beta 0.81 code named Armada''' 

{|
|'''Platform'''
|'''Details'''
|'''Links'''
|-
|'''Linux 32 bit'''
|MD5: 2b1db2251b98e4aecb9d741548deafbe
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%2032%20bit%20Linux.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%2032%20bit%20Linux.zip Mirror 2] [http://burnbit.com/download/183925/OWASP_Mantra_Armada_32_bit_Linux_zip Torrent]
|-
|'''Linux 64 bit'''
|MD5: 2b39fcaf4ad7a57d9f4b8992938430a8
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%2064%20bit%20Linux.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%2064%20bit%20Linux.zip Mirror 2] [http://burnbit.com/download/183926/OWASP_Mantra_Armada_64_bit_Linux_zip Torrent]
|-
|'''Windows'''
|MD5: 80450610eb86871e68f410335cae5f01
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Win.exe/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Win.exe Mirror 2] [http://burnbit.com/download/183928/OWASP_Mantra_Armada_Win_exe Torrent]
|-
|'''Macintosh'''
|MD5: f256cf80a94ce960a90c441eb4b00ce0
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Mac.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Mac.zip Mirror 2] [http://burnbit.com/download/183927/OWASP_Mantra_Armada_Mac_zip Torrent]
|-
|'''Source'''
|MD5: af9a3b960b56a94a7c6227d62d674bea
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Source.7z/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Source.7z Mirror 2] [http://burnbit.com/torrent/183979/OWASP_Mantra_Armada_Source_7z Torrent]
|}

[[Category:OWASP_Download]]

= Project About =

{{:Projects/OWASP Mantra - Security Framework | Project About}}

= Resources =
 

'''Project Pamphlets''' 

[http://www.owasp.org/images/e/e4/OWASP_Mantra-An_Introduction.pdf Project Pamphlet 1] 

'''Project Presentations''' 

[http://www.owasp.org/index.php/File:OWASP_Mantra-An_Introduction.pptx Project Presentation 1] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Project Presentation 2] 

'''Text Tutorials''' 

[http://getmantra.com/forums/Thread-introducing-passiverecon-by-justin-morehouse Introducing PassiveRecon by Justin Morehouse] 
[http://getmantra.com/forums/Thread-introducing-groundspeed-by-felipe Introducing Groundspeed by Felipe] 
[http://getmantra.com/forums/Thread-introducing-link-sidebar-by-varun-n Introducing Link Sidebar by Varun N] 
[http://getmantra.com/forums/Thread-introducing-proxytool-by-robert-rade Introducing ProxyTool by Robert Rade] 
[http://getmantra.com/forums/Thread-introducing-httpfox-by-martin-theimer Introducing HttpFox by Martin Theimer] 
[http://getmantra.com/forums/Thread-how-to-make-your-own-search-bar-item How to make your own search bar item] 
[http://getmantra.com/forums/Thread-how-to-use-moc-crawler How to use MoC crawler] 
[http://getmantra.com/forums/Thread-switching-between-languages-and-locales Switching between languages and locales] 
[http://getmantra.com/forums/Thread-running-mantra-and-firefox-together Running Mantra and Firefox together] 
[http://getmantra.com/forums/Thread-login-form-bypass-using-mantra-security-toolkit Login Form Bypass using Mantra Security Toolkit] 
[http://getmantra.com/forums/Thread-advanced-sql-injection-tutorial-complete-website-rooting Advanced SQL Injection Tutorial - Complete website rooting] 
[http://getmantra.com/forums/Thread-manual-crawling Manual Crawling] 
[http://getmantra.com/forums/Thread-introducing-flagfox Introducing Flagfox] 

'''Video Tutorials''' 

[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 SearchSecurity Screencast] 
ClubHACK 2010 - [http://www.youtube.com/watch?v=GBFxVAM3DLQ 1] [http://www.youtube.com/watch?v=bKACEDWKeyM 2] [http://www.youtube.com/watch?v=qpVHWVOPHTk 3] 
[http://www.youtube.com/watch?v=yTbB42sR208 Broken Authentication Demonstration] 
[http://www.youtube.com/watch?v=o1WVx6eYE-M Broken Session Demonstration] 
[http://www.youtube.com/watch?v=vvPeskadF-s Insecure Direct Object References Demonstration] 
[http://www.youtube.com/watch?v=NK3S-nwiGwA Cross Site Scripting Demonstration] 
[http://www.youtube.com/watch?v=p94ssETMbQ0& Introduction + How to use Mantra Security Toolkit] 
[http://www.youtube.com/watch?v=fxHlthnVJpA Introduction to Mantra (Arabic)] 
[http://www.youtube.com/watch?v=exyUAGseifI Introducing FoxyProxy (Arabic)]

==== Links ====
 
[http://www.getmantra.com/index.html Main Website] 
[http://www.getmantra.com/forums/ Discussion Forums] 
[http://www.facebook.com/getmantra/ Facebook Page] 
[http://getmantra.tumblr.com/ Tumblr] 
[http://twitter.com/getmantra Twitter] 
[http://vimeo.com/getmantra Vimeo] 
[http://sourceforge.net/projects/getmantra/ Sourceforge] 
[http://code.google.com/p/getmantra/ Google Code] 
[http://www.youtube.com/getmantra Youtube]

__NOTOC__ <headertabs />

[[Category:OWASP_Tool]] [[Category:OWASP_Alpha_Quality_Tool]] [[Category:OWASP_Project|Mantra - Security Framework]]
[[Category:OWASP Download]]

Projects/OWASP Mantra - Security Framework/Releases/Mantra Security Toolkit - 0.81

2011-12-30T18:12:33Z

Yashartha Chaturvedi:

{{Template: <includeonly>{{{1}}}</includeonly><noinclude>Release About</noinclude>

| project_name = OWASP Mantra - Security Framework

| project_home_page = OWASP Mantra - Security Framework

| release_name = OWASP Mantra Armada - Beta 0.81

| release_date = 30th December 2011

| release_description =
forth public beta release of OWASP Mantra Security Toolkit - Beta 0.81 code named [http://getmantra.com/forums/Thread-OWASP-Mantra-Armada-0-81-Beta-Release?pid=296#pid296 Armada ] 

| release_license =
[http://www.gnu.org/copyleft/fdl.html GNU Free Documentation 1.2 for documents] & [http://www.gnu.org/licenses/gpl-3.0.html GPL v3 for source code]

| release_download_link = http://www.getmantra.com/download/index.html

| leader_name1 = Abhi M BalaKrishnan
| leader_email1 = abhi@getmantra.com
| leader_username1 = Abhi_M_Balakrishnan

| contributor_name1 = Yashartha Chaturvedi
| contributor_email1 = yashartha@getmantra.com
| contributor_username1 = Yashartha_Chaturvedi

| release_notes = http://getmantra.com/forums/Thread-OWASP-Mantra-Armada-0-81-Beta-Release?pid=296#pid296

| links_url1 =
| links_name1 =
}}

Projects/OWASP Mantra - Security Framework

2011-12-30T18:09:43Z

Yashartha Chaturvedi:

{{Template:<includeonly>{{{1}}}</includeonly><noinclude>Project About</noinclude>
| project_name = OWASP Mantra - Security Framework
| project_home_page = OWASP Mantra - Security Framework
| project_description =Mantra is a security framework which can be very helpful in performing all the five phases of attacks including reconnaissance, scanning and enumeration, gaining access, escalation of privileges,maintaining access, and covering tracks. Apart from that it also contains a set of tools targeted for web developers and code debuggers which makes it handy for both offensive security and defensive security related tasks.

| project_license =[http://www.gnu.org/copyleft/fdl.html GNU Free Documentation 1.2 for documents] & [http://www.gnu.org/licenses/gpl-3.0.html GPL v3 for source code]

| leader_name1 = Abhi M BalaKrishnan
| leader_email1 = abhi@getmantra.com
| leader_username1 = Abhi_M_Balakrishnan

| maintainer_name1 = Yashartha Chaturvedi
| maintainer_email1 = yashartha@getmantra.com
| maintainer_username1 = Yashartha_Chaturvedi

| pamphlet_link = http://www.owasp.org/images/e/e4/OWASP_Mantra-An_Introduction.pdf

| presentation_link = http://www.owasp.org/index.php/File:OWASP_Mantra-An_Introduction.pptx

| mailing_list_name = https://lists.owasp.org/mailman/listinfo/owasp-mantra

| project_road_map = http://www.owasp.org/index.php/OWASP_Mantra_-_Security_Framework/Roadmap

| links_url1 = http://getmantra.com
| links_name1 = http://getmantra.com

| links_url6 =
| links_name6 =

| release_1 = Mantra Security Toolkit - 0.52
| release_2 = Mantra Security Toolkit - 0.61
| release_3 = Mantra Security Toolkit - 0.71
| release_4 = Mantra Security Toolkit - 0.81
| release_5 =

| project_about_page = Projects/OWASP Mantra - Security Framework

}}

Projects/OWASP Mantra - Security Framework/Releases/Current

2011-12-30T18:07:19Z

Yashartha Chaturvedi: Redirected page to Projects/OWASP Mantra - Security Framework/Releases/Mantra Security Toolkit - 0.81

#REDIRECT [[Projects/OWASP Mantra - Security Framework/Releases/Mantra_Security_Toolkit_-_0.81]]

Projects/OWASP Mantra - Security Framework/Releases/OWASP Mantra Armada - Beta 0.81

2011-12-30T18:04:05Z

{{Template: <includeonly>{{{1}}}</includeonly><noinclude>Release About</noinclude>

| project_name = OWASP Mantra - Security Framework

| project_home_page = OWASP Mantra - Security Framework

| release_name = OWASP Mantra Armada - Beta 0.81

| release_date = 30th December 2011

| release_description =
forth public beta release of OWASP Mantra Security Toolkit - Beta 0.81 code named [http://www.getmantra.com/ Armada ] 

| release_license =
[http://www.gnu.org/copyleft/fdl.html GNU Free Documentation 1.2 for documents] & [http://www.gnu.org/licenses/gpl-3.0.html GPL v3 for source code]

| release_download_link = http://www.getmantra.com/download/index.html

| leader_name1 = Abhi M BalaKrishnan
| leader_email1 = abhi@getmantra.com
| leader_username1 = Abhi_M_Balakrishnan

| contributor_name1 = Yashartha Chaturvedi
| contributor_email1 = yashartha@getmantra.com
| contributor_username1 = Yashartha_Chaturvedi

| release_notes = http://getmantra.com/forums/Thread-OWASP-Mantra-Armada-0-81-Beta-Release?pid=296#pid296

| links_url1 =
| links_name1 =
}}

Projects/OWASP Mantra - Security Framework/Releases/Mantra Security Toolkit - 0.81

2011-12-30T18:03:45Z

{{Template: <includeonly>{{{1}}}</includeonly><noinclude>Release About</noinclude>

| project_name = OWASP Mantra - Security Framework

| project_home_page = OWASP Mantra - Security Framework

| release_name = OWASP Mantra Armada - Beta 0.81

| release_date = 30th December 2011

| release_description =
forth public beta release of OWASP Mantra Security Toolkit - Beta 0.81 code named [http://www.getmantra.com/ Armada ] 

| release_license =
[http://www.gnu.org/copyleft/fdl.html GNU Free Documentation 1.2 for documents] & [http://www.gnu.org/licenses/gpl-3.0.html GPL v3 for source code]

| release_download_link = http://www.getmantra.com/download/index.html

| leader_name1 = Abhi M BalaKrishnan
| leader_email1 = abhi@getmantra.com
| leader_username1 = Abhi_M_Balakrishnan

| contributor_name1 = Yashartha Chaturvedi
| contributor_email1 = yashartha@getmantra.com
| contributor_username1 = Yashartha_Chaturvedi

| release_notes = http://getmantra.com/forums/Thread-OWASP-Mantra-Armada-0-81-Beta-Release?pid=296#pid296

| links_url1 =
| links_name1 =
}}

Projects/OWASP Mantra - Security Framework/Releases/Mantra Security Toolkit - 0.71

2011-12-30T18:01:13Z

Yashartha Chaturvedi:

{{Template: <includeonly>{{{1}}}</includeonly><noinclude>Release About</noinclude>

| project_name = OWASP Mantra - Security Framework

| project_home_page = OWASP Mantra - Security Framework

| release_name = OWASP Mantra Armada - Beta 0.81

| release_date = 30th December 2011

| release_description =
forth public beta release of OWASP Mantra Security Toolkit - Beta 0.81 code named [http://www.getmantra.com/ Armada ] 

| release_license =
[http://www.gnu.org/copyleft/fdl.html GNU Free Documentation 1.2 for documents] & [http://www.gnu.org/licenses/gpl-3.0.html GPL v3 for source code]

| release_download_link = http://www.getmantra.com/download/index.html

| leader_name1 = Abhi M BalaKrishnan
| leader_email1 = abhi@getmantra.com
| leader_username1 = Abhi_M_Balakrishnan

| contributor_name1 = Yashartha Chaturvedi
| contributor_email1 = yashartha@getmantra.com
| contributor_username1 = Yashartha_Chaturvedi

| release_notes = http://getmantra.com/forums/Thread-OWASP-Mantra-Armada-0-81-Beta-Release?pid=296#pid296

| links_url1 =
| links_name1 =
}}

OWASP Mantra - Security Framework

2011-12-30T17:45:35Z

Yashartha Chaturvedi:

==== Main ====

= Overview =

[[Image:OWASP Mantra Security Framework.jpg|right|200px|OWASP Mantra Security Framework.jpg]] 

*Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software.
*Mantra is lite, flexible, portable and user friendly with a nice graphical user interface. You can carry it in memory cards, flash drives, CD/DVDs, etc. It can be run natively on Linux, Windows and Mac platforms. It can also be installed on to your system within minutes. Mantra is absolutely free of cost and takes no time for you to set up.

== Main Links ==

'''[http://getmantra.com/download/index.html Download Mantra - Security Framework]''' 

*[http://www.youtube.com/watch?v=GBFxVAM3DLQ Conference Video 1]
*[http://www.youtube.com/watch?v=bKACEDWKeyM Conference Video 2]
*[http://www.youtube.com/watch?v=qpVHWVOPHTk Conference Video 3]

*[http://chmag.in/article/feb2011/mantra-%E2%80%93-free-and-open-source-security-framework Article/Publication ]

 

= Project Goals =

#Create an ecosystem for hackers based on browser
#To bring the attention of security people to the potential of a browser based security platform
#Provide easy to use and portable platform for demonstrating common web based attacks( read training )
#To associate with other security tools/products to make a better environment. Eg:
##It can be a nice addition to security distribution OSs like OWASP Live CD
##It can be used to solve basic levels of CTF contests
##It can associate with projects like DVWA to showcase attacks
##It can bring functions like crawler, SQL injection scanner etc by installing extensions.

 

= Tools =
 " A sword never kills anybody; it is a tool in the killer's hand." - Lucius Annaeus Seneca 
Mantra is a powerful set of tools to make the attacker's task easier. The beta version of Mantra Security Toolkit contains following tools built onto it. Moreover Mantra follows the guidelines and structure of [http://firecat.fr/ FireCAT ] which makes it even more accessible. You can also always suggest any tools/ scripts that you would like see in the next release. 

== Tools ==
+'''Information Gathering'''

- ''Flagfox'' 
- ''JSView'' 
- ''PassiveRecon'' 
- ''Facebook search'' 
- ''People Search Engine'' 
- ''View Dependencies'' 
- ''Link Sidebar''

+'''Editors'''

- ''JSView'' 
- ''Firebug''

+'''Network Utilities'''

- ''FireFTP'' 
- ''DNS Cache'' 
- ''SQLite Manager'' 
- ''HTTP Fox'' 
- ''FireSSH''

+'''Miscellaneous'''

- ''Greasemonkey'' 
- ''Greasefire'' 
- ''CacheToggle'' 
- ''URL Flipper'' 
- ''Event Spy'' 
- ''Firebug Autocompleter'' 
- ''FirePHP'' 
- ''FireRainbow'' 
- ''Flashbug'' 
- ''Illuminations for Developers'' 
- ''In line Code Finder for Firebug'' 
- ''Inspect Context'' 
- ''Inspector Widget'' 
- ''Inspect This'' 
- ''Scriptish'' 
- ''Session Manager'' 
- ''Stacked Inspector''

+'''Application Auditing'''

- ''Hackbar'' 
- ''RESTClient'' 
- ''Tamper Data'' 
- ''Live HTTP Headers'' 
- ''RefControl'' 
- ''User Agent Switcher'' 
- ''Web Developer'' 
- ''DOM Inspector'' 
- ''Inspect This'' 
- ''Formfox'' 
- ''SQL Inject Me'' 
- ''XSS Me'' 
- ''Cookies Manager+'' 
- ''Firecookie'' 
- ''Autofill Forms'' 
- ''Cookie Monster'' 
- ''Fireforce'' 
- ''Groundspeed'' 
- ''Http Requester'' 
- ''Modify Headers'' 
- ''Poster'' 
- ''Ref Spoof'' 
- ''SeleniumExpertSeleniumIDE'' 
- ''SeleniumIDE'' 
- ''SOAClient'' 
- ''Websecurify''

+'''Proxy'''

- ''FoxyProxy'' 
- ''HttpFox'' ''
- ''Proxy Tool''

= News =
 
[http://www.computerweekly.com/blogs/open-source-insider/2011/10/free-software-testing-on-usb-for-students-to-web-developers-with-mantra.html Computer Weekly Article] 
[http://getmantra.com/forums/Thread-owasp-mantra-c0c0n-11-and-appseclatam-11-release OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release] 
[http://www.ekoparty.org/2011/workshops/owasp-mantra-security-framework.php Mantra at Ekoparty Security Conference] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Mantra at OWASP LatamTour - Buenos Aires, Argentina] 
Getting secure with Mantra: An open source penetration testing kit - 1. [http://www.computerworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss Computer World] 2. [http://www.cio.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ CIO] 3. [http://www.techworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ Tech World] 4. [http://www.cso.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss CSO] 
[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 Searchsecurity Screencast] 
[http://getmantra.com/forums/Thread-mantra-in-matriux-upcoming-release-leaked Mantra in Matriux Security Distribution] 
[http://getmantra.com/forums/Thread-mantra-in-backtrack-5 Mantra in Backtrack 5 - Penetration Testing Distribution] 
[http://www.facebook.com/photo.php?fbid=185544081485201&set=a.170788249627451.33033.170787489627527&type=1&ref=nf Mantra – Free and Open Source Security Framework' - published in India's first hacking magazine ClubHack Mag] 
[http://clubhack.com/2010/speakers/ ClubHACK 2010 Mantra release]

= Contributors =
 
"It is purpose that created us, purpose that connects us, purpose that pulls us, that guides us, that drives us, that binds us, it is purpose that defines us." - Agent Smith 
'''Project Leaders''' 
[[User:Abhi_M_Balakrishnan|Abhi M Balakrishnan]] 
[[User:Yashartha_Chaturvedi|Yashartha Chaturvedi]] 
[[User:Gokul_C_Gopinath|Gokul C Gopinath]] 

'''Other Members''' 
[[User:Maximiliano_Soler|Maximiliano Soler]] 
Gopu C Gopinath 

= Download =
 
" All things are difficult before they are easy." - Thomas Fuller 
'''OWASP Mantra c0c0n 11 and AppSecLatam 11 Release ( 0.71 Beta )''' 

{|
|'''Platform'''
|'''Details'''
|'''Links'''
|-
|'''Linux 32 bit'''
|MD5: 2b1db2251b98e4aecb9d741548deafbe
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%2032%20bit%20Linux.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%2032%20bit%20Linux.zip Mirror 2] [http://burnbit.com/download/183925/OWASP_Mantra_Armada_32_bit_Linux_zip Torrent]
|-
|'''Linux 64 bit'''
|MD5: 2b39fcaf4ad7a57d9f4b8992938430a8
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%2064%20bit%20Linux.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%2064%20bit%20Linux.zip Mirror 2] [http://burnbit.com/download/183926/OWASP_Mantra_Armada_64_bit_Linux_zip Torrent]
|-
|'''Windows'''
|MD5: 80450610eb86871e68f410335cae5f01
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Win.exe/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Win.exe Mirror 2] [http://burnbit.com/download/183928/OWASP_Mantra_Armada_Win_exe Torrent]
|-
|'''Macintosh'''
|MD5: f256cf80a94ce960a90c441eb4b00ce0
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Mac.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Mac.zip Mirror 2] [http://burnbit.com/download/183927/OWASP_Mantra_Armada_Mac_zip Torrent]
|-
|'''Source'''
|MD5: af9a3b960b56a94a7c6227d62d674bea
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Source.7z/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Source.7z Mirror 2] [http://burnbit.com/torrent/183979/OWASP_Mantra_Armada_Source_7z Torrent]
|}

[[Category:OWASP_Download]]

= Project About =

{{:Projects/OWASP Mantra - Security Framework | Project About}}

= Resources =
 

'''Project Pamphlets''' 

[http://www.owasp.org/images/e/e4/OWASP_Mantra-An_Introduction.pdf Project Pamphlet 1] 

'''Project Presentations''' 

[http://www.owasp.org/index.php/File:OWASP_Mantra-An_Introduction.pptx Project Presentation 1] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Project Presentation 2] 

'''Text Tutorials''' 

[http://getmantra.com/forums/Thread-introducing-passiverecon-by-justin-morehouse Introducing PassiveRecon by Justin Morehouse] 
[http://getmantra.com/forums/Thread-introducing-groundspeed-by-felipe Introducing Groundspeed by Felipe] 
[http://getmantra.com/forums/Thread-introducing-link-sidebar-by-varun-n Introducing Link Sidebar by Varun N] 
[http://getmantra.com/forums/Thread-introducing-proxytool-by-robert-rade Introducing ProxyTool by Robert Rade] 
[http://getmantra.com/forums/Thread-introducing-httpfox-by-martin-theimer Introducing HttpFox by Martin Theimer] 
[http://getmantra.com/forums/Thread-how-to-make-your-own-search-bar-item How to make your own search bar item] 
[http://getmantra.com/forums/Thread-how-to-use-moc-crawler How to use MoC crawler] 
[http://getmantra.com/forums/Thread-switching-between-languages-and-locales Switching between languages and locales] 
[http://getmantra.com/forums/Thread-running-mantra-and-firefox-together Running Mantra and Firefox together] 
[http://getmantra.com/forums/Thread-login-form-bypass-using-mantra-security-toolkit Login Form Bypass using Mantra Security Toolkit] 
[http://getmantra.com/forums/Thread-advanced-sql-injection-tutorial-complete-website-rooting Advanced SQL Injection Tutorial - Complete website rooting] 
[http://getmantra.com/forums/Thread-manual-crawling Manual Crawling] 
[http://getmantra.com/forums/Thread-introducing-flagfox Introducing Flagfox] 

'''Video Tutorials''' 

[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 SearchSecurity Screencast] 
ClubHACK 2010 - [http://www.youtube.com/watch?v=GBFxVAM3DLQ 1] [http://www.youtube.com/watch?v=bKACEDWKeyM 2] [http://www.youtube.com/watch?v=qpVHWVOPHTk 3] 
[http://www.youtube.com/watch?v=yTbB42sR208 Broken Authentication Demonstration] 
[http://www.youtube.com/watch?v=o1WVx6eYE-M Broken Session Demonstration] 
[http://www.youtube.com/watch?v=vvPeskadF-s Insecure Direct Object References Demonstration] 
[http://www.youtube.com/watch?v=NK3S-nwiGwA Cross Site Scripting Demonstration] 
[http://www.youtube.com/watch?v=p94ssETMbQ0& Introduction + How to use Mantra Security Toolkit] 
[http://www.youtube.com/watch?v=fxHlthnVJpA Introduction to Mantra (Arabic)] 
[http://www.youtube.com/watch?v=exyUAGseifI Introducing FoxyProxy (Arabic)]

==== Links ====
 
[http://www.getmantra.com/index.html Main Website] 
[http://www.getmantra.com/forums/ Discussion Forums] 
[http://www.facebook.com/getmantra/ Facebook Page] 
[http://getmantra.tumblr.com/ Tumblr] 
[http://twitter.com/getmantra Twitter] 
[http://vimeo.com/getmantra Vimeo] 
[http://sourceforge.net/projects/getmantra/ Sourceforge] 
[http://code.google.com/p/getmantra/ Google Code] 
[http://www.youtube.com/getmantra Youtube]

__NOTOC__ <headertabs />

[[Category:OWASP_Tool]] [[Category:OWASP_Alpha_Quality_Tool]] [[Category:OWASP_Project|Mantra - Security Framework]]
[[Category:OWASP Download]]

OWASP Mantra - Security Framework

2011-12-30T17:44:12Z

Yashartha Chaturvedi:

==== Main ====

= Overview =

[[Image:OWASP Mantra Security Framework.jpg|right|200px|OWASP Mantra Security Framework.jpg]] 

*Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software.
*Mantra is lite, flexible, portable and user friendly with a nice graphical user interface. You can carry it in memory cards, flash drives, CD/DVDs, etc. It can be run natively on Linux, Windows and Mac platforms. It can also be installed on to your system within minutes. Mantra is absolutely free of cost and takes no time for you to set up.

== Main Links ==

'''[http://getmantra.com/download/index.html Download Mantra - Security Framework]''' 

*[http://www.youtube.com/watch?v=GBFxVAM3DLQ Conference Video 1]
*[http://www.youtube.com/watch?v=bKACEDWKeyM Conference Video 2]
*[http://www.youtube.com/watch?v=qpVHWVOPHTk Conference Video 3]

*[http://chmag.in/article/feb2011/mantra-%E2%80%93-free-and-open-source-security-framework Article/Publication ]

 

= Project Goals =

#Create an ecosystem for hackers based on browser
#To bring the attention of security people to the potential of a browser based security platform
#Provide easy to use and portable platform for demonstrating common web based attacks( read training )
#To associate with other security tools/products to make a better environment. Eg:
##It can be a nice addition to security distribution OSs like OWASP Live CD
##It can be used to solve basic levels of CTF contests
##It can associate with projects like DVWA to showcase attacks
##It can bring functions like crawler, SQL injection scanner etc by installing extensions.

 

= Tools =
 " A sword never kills anybody; it is a tool in the killer's hand." - Lucius Annaeus Seneca 
Mantra is a powerful set of tools to make the attacker's task easier. The beta version of Mantra Security Toolkit contains following tools built onto it. Moreover Mantra follows the guidelines and structure of [http://firecat.fr/ FireCAT ] which makes it even more accessible. You can also always suggest any tools/ scripts that you would like see in the next release. 

== Tools ==
+'''Information Gathering'''

- ''Flagfox'' 
- ''JSView'' 
- ''PassiveRecon'' 
- ''Facebook search'' 
- ''People Search Engine'' 
- ''View Dependencies'' 
- ''Link Sidebar''

+'''Editors'''

- ''JSView'' 
- ''Firebug''

+'''Network Utilities'''

- ''FireFTP'' 
- ''DNS Cache'' 
- ''SQLite Manager'' 
- ''HTTP Fox'' 
- ''FireSSH''

+'''Miscellaneous'''

- ''Greasemonkey'' 
- ''Greasefire'' 
- ''CacheToggle'' 
- ''URL Flipper'' 
- ''Event Spy'' 
- ''Firebug Autocompleter'' 
- ''FirePHP'' 
- ''FireRainbow'' 
- ''Flashbug'' 
- ''Illuminations for Developers'' 
- ''In line Code Finder for Firebug'' 
- ''Inspect Context'' 
- ''Inspector Widget'' 
- ''Inspect This'' 
- ''Scriptish'' 
- ''Session Manager'' 
- ''Stacked Inspector''

+'''Application Auditing'''

- ''Hackbar'' 
- ''RESTClient'' 
- ''Tamper Data'' 
- ''Live HTTP Headers'' 
- ''RefControl'' 
- ''User Agent Switcher'' 
- ''Web Developer'' 
- ''DOM Inspector'' 
- ''Inspect This'' 
- ''Formfox'' 
- ''SQL Inject Me'' 
- ''XSS Me'' 
- ''Cookies Manager+'' 
- ''Firecookie'' 
- ''Autofill Forms'' 
- ''Cookie Monster'' 
- ''Fireforce'' 
- ''Groundspeed'' 
- ''Http Requester'' 
- ''Modify Headers'' 
- ''Poster'' 
- ''Ref Spoof'' 
- ''SeleniumExpertSeleniumIDE'' 
- ''SeleniumIDE'' 
- ''SOAClient'' 
- ''Websecurify''

+'''Proxy'''

- ''FoxyProxy'' 
- ''HttpFox'' ''
- ''Proxy Tool''

= News =
 
[http://www.computerweekly.com/blogs/open-source-insider/2011/10/free-software-testing-on-usb-for-students-to-web-developers-with-mantra.html Computer Weekly Article] 
[http://getmantra.com/forums/Thread-owasp-mantra-c0c0n-11-and-appseclatam-11-release OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release] 
[http://www.ekoparty.org/2011/workshops/owasp-mantra-security-framework.php Mantra at Ekoparty Security Conference] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Mantra at OWASP LatamTour - Buenos Aires, Argentina] 
Getting secure with Mantra: An open source penetration testing kit - 1. [http://www.computerworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss Computer World] 2. [http://www.cio.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ CIO] 3. [http://www.techworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ Tech World] 4. [http://www.cso.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss CSO] 
[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 Searchsecurity Screencast] 
[http://getmantra.com/forums/Thread-mantra-in-matriux-upcoming-release-leaked Mantra in Matriux Security Distribution] 
[http://getmantra.com/forums/Thread-mantra-in-backtrack-5 Mantra in Backtrack 5 - Penetration Testing Distribution] 
[http://www.facebook.com/photo.php?fbid=185544081485201&set=a.170788249627451.33033.170787489627527&type=1&ref=nf Mantra – Free and Open Source Security Framework' - published in India's first hacking magazine ClubHack Mag] 
[http://clubhack.com/2010/speakers/ ClubHACK 2010 Mantra release]

= Contributors =
 
"It is purpose that created us, purpose that connects us, purpose that pulls us, that guides us, that drives us, that binds us, it is purpose that defines us." - Agent Smith 
'''Project Leaders''' 
[[User:Abhi_M_Balakrishnan|Abhi M Balakrishnan]] 
[[User:Yashartha_Chaturvedi|Yashartha Chaturvedi]] 
[[User:Gokul_C_Gopinath|Gokul C Gopinath]] 

'''Other Members''' 
[[User:Maximiliano_Soler|Maximiliano Soler]] 
Gopu C Gopinath 

= Download =
 
" All things are difficult before they are easy." - Thomas Fuller 
'''OWASP Mantra c0c0n 11 and AppSecLatam 11 Release ( 0.71 Beta )''' 

{|
|'''Platform'''
|'''Details'''
|'''Links'''
|-
|'''Linux 32 bit'''
|MD5: 2b1db2251b98e4aecb9d741548deafbe
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%2032%20bit%20Linux.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%2032%20bit%20Linux.zip Mirror 2] [http://burnbit.com/download/183925/OWASP_Mantra_Armada_32_bit_Linux_zip Torrent]
|-
|'''Linux 64 bit'''
|MD5: 2b39fcaf4ad7a57d9f4b8992938430a8
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%2064%20bit%20Linux.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%2064%20bit%20Linux.zip Mirror 2] [http://burnbit.com/download/183926/OWASP_Mantra_Armada_64_bit_Linux_zip]
|-
|'''Windows'''
|MD5: 80450610eb86871e68f410335cae5f01
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Win.exe/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Win.exe Mirror 2] [http://burnbit.com/download/183928/OWASP_Mantra_Armada_Win_exe Torrent]
|-
|'''Macintosh'''
|MD5: f256cf80a94ce960a90c441eb4b00ce0
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Mac.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Mac.zip Mirror 2] [http://burnbit.com/download/183927/OWASP_Mantra_Armada_Mac_zip Torrent]
|-
|'''Source'''
|MD5: af9a3b960b56a94a7c6227d62d674bea
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/Armada%20-%200.81%20Beta/OWASP%20Mantra%20-%20Armada%20Source.7z/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20Armada%20Source.7z Mirror 2] [http://burnbit.com/torrent/183979/OWASP_Mantra_Armada_Source_7z Torrent]
|}

[[Category:OWASP_Download]]

= Project About =

{{:Projects/OWASP Mantra - Security Framework | Project About}}

= Resources =
 

'''Project Pamphlets''' 

[http://www.owasp.org/images/e/e4/OWASP_Mantra-An_Introduction.pdf Project Pamphlet 1] 

'''Project Presentations''' 

[http://www.owasp.org/index.php/File:OWASP_Mantra-An_Introduction.pptx Project Presentation 1] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Project Presentation 2] 

'''Text Tutorials''' 

[http://getmantra.com/forums/Thread-introducing-passiverecon-by-justin-morehouse Introducing PassiveRecon by Justin Morehouse] 
[http://getmantra.com/forums/Thread-introducing-groundspeed-by-felipe Introducing Groundspeed by Felipe] 
[http://getmantra.com/forums/Thread-introducing-link-sidebar-by-varun-n Introducing Link Sidebar by Varun N] 
[http://getmantra.com/forums/Thread-introducing-proxytool-by-robert-rade Introducing ProxyTool by Robert Rade] 
[http://getmantra.com/forums/Thread-introducing-httpfox-by-martin-theimer Introducing HttpFox by Martin Theimer] 
[http://getmantra.com/forums/Thread-how-to-make-your-own-search-bar-item How to make your own search bar item] 
[http://getmantra.com/forums/Thread-how-to-use-moc-crawler How to use MoC crawler] 
[http://getmantra.com/forums/Thread-switching-between-languages-and-locales Switching between languages and locales] 
[http://getmantra.com/forums/Thread-running-mantra-and-firefox-together Running Mantra and Firefox together] 
[http://getmantra.com/forums/Thread-login-form-bypass-using-mantra-security-toolkit Login Form Bypass using Mantra Security Toolkit] 
[http://getmantra.com/forums/Thread-advanced-sql-injection-tutorial-complete-website-rooting Advanced SQL Injection Tutorial - Complete website rooting] 
[http://getmantra.com/forums/Thread-manual-crawling Manual Crawling] 
[http://getmantra.com/forums/Thread-introducing-flagfox Introducing Flagfox] 

'''Video Tutorials''' 

[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 SearchSecurity Screencast] 
ClubHACK 2010 - [http://www.youtube.com/watch?v=GBFxVAM3DLQ 1] [http://www.youtube.com/watch?v=bKACEDWKeyM 2] [http://www.youtube.com/watch?v=qpVHWVOPHTk 3] 
[http://www.youtube.com/watch?v=yTbB42sR208 Broken Authentication Demonstration] 
[http://www.youtube.com/watch?v=o1WVx6eYE-M Broken Session Demonstration] 
[http://www.youtube.com/watch?v=vvPeskadF-s Insecure Direct Object References Demonstration] 
[http://www.youtube.com/watch?v=NK3S-nwiGwA Cross Site Scripting Demonstration] 
[http://www.youtube.com/watch?v=p94ssETMbQ0& Introduction + How to use Mantra Security Toolkit] 
[http://www.youtube.com/watch?v=fxHlthnVJpA Introduction to Mantra (Arabic)] 
[http://www.youtube.com/watch?v=exyUAGseifI Introducing FoxyProxy (Arabic)]

==== Links ====
 
[http://www.getmantra.com/index.html Main Website] 
[http://www.getmantra.com/forums/ Discussion Forums] 
[http://www.facebook.com/getmantra/ Facebook Page] 
[http://getmantra.tumblr.com/ Tumblr] 
[http://twitter.com/getmantra Twitter] 
[http://vimeo.com/getmantra Vimeo] 
[http://sourceforge.net/projects/getmantra/ Sourceforge] 
[http://code.google.com/p/getmantra/ Google Code] 
[http://www.youtube.com/getmantra Youtube]

__NOTOC__ <headertabs />

[[Category:OWASP_Tool]] [[Category:OWASP_Alpha_Quality_Tool]] [[Category:OWASP_Project|Mantra - Security Framework]]
[[Category:OWASP Download]]

OWASP Mantra - Security Framework

2011-12-30T17:32:07Z

Yashartha Chaturvedi:

==== Main ====

= Overview =

[[Image:OWASP Mantra Security Framework.jpg|right|200px|OWASP Mantra Security Framework.jpg]] 

*Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software.
*Mantra is lite, flexible, portable and user friendly with a nice graphical user interface. You can carry it in memory cards, flash drives, CD/DVDs, etc. It can be run natively on Linux, Windows and Mac platforms. It can also be installed on to your system within minutes. Mantra is absolutely free of cost and takes no time for you to set up.

== Main Links ==

'''[http://getmantra.com/download/index.html Download Mantra - Security Framework]''' 

*[http://www.youtube.com/watch?v=GBFxVAM3DLQ Conference Video 1]
*[http://www.youtube.com/watch?v=bKACEDWKeyM Conference Video 2]
*[http://www.youtube.com/watch?v=qpVHWVOPHTk Conference Video 3]

*[http://chmag.in/article/feb2011/mantra-%E2%80%93-free-and-open-source-security-framework Article/Publication ]

 

= Project Goals =

#Create an ecosystem for hackers based on browser
#To bring the attention of security people to the potential of a browser based security platform
#Provide easy to use and portable platform for demonstrating common web based attacks( read training )
#To associate with other security tools/products to make a better environment. Eg:
##It can be a nice addition to security distribution OSs like OWASP Live CD
##It can be used to solve basic levels of CTF contests
##It can associate with projects like DVWA to showcase attacks
##It can bring functions like crawler, SQL injection scanner etc by installing extensions.

 

= Tools =
 " A sword never kills anybody; it is a tool in the killer's hand." - Lucius Annaeus Seneca 
Mantra is a powerful set of tools to make the attacker's task easier. The beta version of Mantra Security Toolkit contains following tools built onto it. Moreover Mantra follows the guidelines and structure of [http://firecat.fr/ FireCAT ] which makes it even more accessible. You can also always suggest any tools/ scripts that you would like see in the next release. 

== Tools ==
+'''Information Gathering'''

- ''Flagfox'' 
- ''JSView'' 
- ''PassiveRecon'' 
- ''Facebook search'' 
- ''People Search Engine'' 
- ''View Dependencies'' 
- ''Link Sidebar''

+'''Editors'''

- ''JSView'' 
- ''Firebug''

+'''Network Utilities'''

- ''FireFTP'' 
- ''DNS Cache'' 
- ''SQLite Manager'' 
- ''HTTP Fox'' 
- ''FireSSH''

+'''Miscellaneous'''

- ''Greasemonkey'' 
- ''Greasefire'' 
- ''CacheToggle'' 
- ''URL Flipper'' 
- ''Event Spy'' 
- ''Firebug Autocompleter'' 
- ''FirePHP'' 
- ''FireRainbow'' 
- ''Flashbug'' 
- ''Illuminations for Developers'' 
- ''In line Code Finder for Firebug'' 
- ''Inspect Context'' 
- ''Inspector Widget'' 
- ''Inspect This'' 
- ''Scriptish'' 
- ''Session Manager'' 
- ''Stacked Inspector''

+'''Application Auditing'''

- ''Hackbar'' 
- ''RESTClient'' 
- ''Tamper Data'' 
- ''Live HTTP Headers'' 
- ''RefControl'' 
- ''User Agent Switcher'' 
- ''Web Developer'' 
- ''DOM Inspector'' 
- ''Inspect This'' 
- ''Formfox'' 
- ''SQL Inject Me'' 
- ''XSS Me'' 
- ''Cookies Manager+'' 
- ''Firecookie'' 
- ''Autofill Forms'' 
- ''Cookie Monster'' 
- ''Fireforce'' 
- ''Groundspeed'' 
- ''Http Requester'' 
- ''Modify Headers'' 
- ''Poster'' 
- ''Ref Spoof'' 
- ''SeleniumExpertSeleniumIDE'' 
- ''SeleniumIDE'' 
- ''SOAClient'' 
- ''Websecurify''

+'''Proxy'''

- ''FoxyProxy'' 
- ''HttpFox'' ''
- ''Proxy Tool''

= News =
 
[http://www.computerweekly.com/blogs/open-source-insider/2011/10/free-software-testing-on-usb-for-students-to-web-developers-with-mantra.html Computer Weekly Article] 
[http://getmantra.com/forums/Thread-owasp-mantra-c0c0n-11-and-appseclatam-11-release OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release] 
[http://www.ekoparty.org/2011/workshops/owasp-mantra-security-framework.php Mantra at Ekoparty Security Conference] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Mantra at OWASP LatamTour - Buenos Aires, Argentina] 
Getting secure with Mantra: An open source penetration testing kit - 1. [http://www.computerworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss Computer World] 2. [http://www.cio.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ CIO] 3. [http://www.techworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ Tech World] 4. [http://www.cso.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss CSO] 
[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 Searchsecurity Screencast] 
[http://getmantra.com/forums/Thread-mantra-in-matriux-upcoming-release-leaked Mantra in Matriux Security Distribution] 
[http://getmantra.com/forums/Thread-mantra-in-backtrack-5 Mantra in Backtrack 5 - Penetration Testing Distribution] 
[http://www.facebook.com/photo.php?fbid=185544081485201&set=a.170788249627451.33033.170787489627527&type=1&ref=nf Mantra – Free and Open Source Security Framework' - published in India's first hacking magazine ClubHack Mag] 
[http://clubhack.com/2010/speakers/ ClubHACK 2010 Mantra release]

= Contributors =
 
"It is purpose that created us, purpose that connects us, purpose that pulls us, that guides us, that drives us, that binds us, it is purpose that defines us." - Agent Smith 
'''Project Leaders''' 
[[User:Abhi_M_Balakrishnan|Abhi M Balakrishnan]] 
[[User:Yashartha_Chaturvedi|Yashartha Chaturvedi]] 
[[User:Gokul_C_Gopinath|Gokul C Gopinath]] 

'''Other Members''' 
[[User:Maximiliano_Soler|Maximiliano Soler]] 
Gopu C Gopinath 

= Download =
 
" All things are difficult before they are easy." - Thomas Fuller 
'''OWASP Mantra c0c0n 11 and AppSecLatam 11 Release ( 0.71 Beta )''' 

{|
|'''Platform'''
|'''Details'''
|'''Links'''
|-
|'''Linux 32 bit'''
|MD5: 8e874e6d4e119111bf3dbcbe0f9a1c69
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Linux%2032%20bit/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20i686%20Release.tar.bz2/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20i686%20Release.tar.bz2 Mirror 2] [http://burnbit.com/torrent/178063/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_i686_Release_tar_bz2 Torrent]
|-
|'''Linux 64 bit'''
|MD5: d0ed8fce30a20ad907a97047985e8c05
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Linux%2064%20bit/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20-%20x86_64.tar.bz2/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20-%20x86_64.tar.bz2 Mirror 2] [http://burnbit.com/torrent/178679/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_x86_64_tar_bz2 Torrent]
|-
|'''Windows'''
|MD5: 98517c9f61561d8c656a2d2436f2333d
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Windows/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20Release.exe/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20Release.exe Mirror 2] [http://burnbit.com/torrent/178065/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_Release_exe Torrent]
|-
|'''Macintosh'''
|MD5: 949808a8f75fa0bcc5730cdcf73f7844
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Macintosh/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011.zip Mirror 2] [http://burnbit.com/torrent/178066/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_zip Torrent]
|-
|'''Source'''
|MD5: 6fdb5e9408261d741f24cb83df4b4066
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Source/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20Release%20Source.7z/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20Release%20Source.7z Mirror 2] [http://burnbit.com/torrent/178067/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_Release_Source_7z Torrent]
|}

[[Category:OWASP_Download]]

= Project About =

{{:Projects/OWASP Mantra - Security Framework | Project About}}

= Resources =
 

'''Project Pamphlets''' 

[http://www.owasp.org/images/e/e4/OWASP_Mantra-An_Introduction.pdf Project Pamphlet 1] 

'''Project Presentations''' 

[http://www.owasp.org/index.php/File:OWASP_Mantra-An_Introduction.pptx Project Presentation 1] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Project Presentation 2] 

'''Text Tutorials''' 

[http://getmantra.com/forums/Thread-introducing-passiverecon-by-justin-morehouse Introducing PassiveRecon by Justin Morehouse] 
[http://getmantra.com/forums/Thread-introducing-groundspeed-by-felipe Introducing Groundspeed by Felipe] 
[http://getmantra.com/forums/Thread-introducing-link-sidebar-by-varun-n Introducing Link Sidebar by Varun N] 
[http://getmantra.com/forums/Thread-introducing-proxytool-by-robert-rade Introducing ProxyTool by Robert Rade] 
[http://getmantra.com/forums/Thread-introducing-httpfox-by-martin-theimer Introducing HttpFox by Martin Theimer] 
[http://getmantra.com/forums/Thread-how-to-make-your-own-search-bar-item How to make your own search bar item] 
[http://getmantra.com/forums/Thread-how-to-use-moc-crawler How to use MoC crawler] 
[http://getmantra.com/forums/Thread-switching-between-languages-and-locales Switching between languages and locales] 
[http://getmantra.com/forums/Thread-running-mantra-and-firefox-together Running Mantra and Firefox together] 
[http://getmantra.com/forums/Thread-login-form-bypass-using-mantra-security-toolkit Login Form Bypass using Mantra Security Toolkit] 
[http://getmantra.com/forums/Thread-advanced-sql-injection-tutorial-complete-website-rooting Advanced SQL Injection Tutorial - Complete website rooting] 
[http://getmantra.com/forums/Thread-manual-crawling Manual Crawling] 
[http://getmantra.com/forums/Thread-introducing-flagfox Introducing Flagfox] 

'''Video Tutorials''' 

[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 SearchSecurity Screencast] 
ClubHACK 2010 - [http://www.youtube.com/watch?v=GBFxVAM3DLQ 1] [http://www.youtube.com/watch?v=bKACEDWKeyM 2] [http://www.youtube.com/watch?v=qpVHWVOPHTk 3] 
[http://www.youtube.com/watch?v=yTbB42sR208 Broken Authentication Demonstration] 
[http://www.youtube.com/watch?v=o1WVx6eYE-M Broken Session Demonstration] 
[http://www.youtube.com/watch?v=vvPeskadF-s Insecure Direct Object References Demonstration] 
[http://www.youtube.com/watch?v=NK3S-nwiGwA Cross Site Scripting Demonstration] 
[http://www.youtube.com/watch?v=p94ssETMbQ0& Introduction + How to use Mantra Security Toolkit] 
[http://www.youtube.com/watch?v=fxHlthnVJpA Introduction to Mantra (Arabic)] 
[http://www.youtube.com/watch?v=exyUAGseifI Introducing FoxyProxy (Arabic)]

==== Links ====
 
[http://www.getmantra.com/index.html Main Website] 
[http://www.getmantra.com/forums/ Discussion Forums] 
[http://www.facebook.com/getmantra/ Facebook Page] 
[http://getmantra.tumblr.com/ Tumblr] 
[http://twitter.com/getmantra Twitter] 
[http://vimeo.com/getmantra Vimeo] 
[http://sourceforge.net/projects/getmantra/ Sourceforge] 
[http://code.google.com/p/getmantra/ Google Code] 
[http://www.youtube.com/getmantra Youtube]

__NOTOC__ <headertabs />

[[Category:OWASP_Tool]] [[Category:OWASP_Alpha_Quality_Tool]] [[Category:OWASP_Project|Mantra - Security Framework]]
[[Category:OWASP Download]]

OWASP Mantra - Security Framework

2011-12-30T17:30:48Z

Yashartha Chaturvedi:

==== Main ====

= Overview =

[[Image:OWASP Mantra Security Framework.jpg|right|200px|OWASP Mantra Security Framework.jpg]] 

*Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software.
*Mantra is lite, flexible, portable and user friendly with a nice graphical user interface. You can carry it in memory cards, flash drives, CD/DVDs, etc. It can be run natively on Linux, Windows and Mac platforms. It can also be installed on to your system within minutes. Mantra is absolutely free of cost and takes no time for you to set up.

= Project Goals =

#Create an ecosystem for hackers based on browser
#To bring the attention of security people to the potential of a browser based security platform
#Provide easy to use and portable platform for demonstrating common web based attacks( read training )
#To associate with other security tools/products to make a better environment. Eg:
##It can be a nice addition to security distribution OSs like OWASP Live CD
##It can be used to solve basic levels of CTF contests
##It can associate with projects like DVWA to showcase attacks
##It can bring functions like crawler, SQL injection scanner etc by installing extensions.

== Main Links ==

'''[http://getmantra.com/download/index.html Download Mantra - Security Framework]''' 

*[http://www.youtube.com/watch?v=GBFxVAM3DLQ Conference Video 1]
*[http://www.youtube.com/watch?v=bKACEDWKeyM Conference Video 2]
*[http://www.youtube.com/watch?v=qpVHWVOPHTk Conference Video 3]

*[http://chmag.in/article/feb2011/mantra-%E2%80%93-free-and-open-source-security-framework Article/Publication ]

 

= Tools =
 " A sword never kills anybody; it is a tool in the killer's hand." - Lucius Annaeus Seneca 
Mantra is a powerful set of tools to make the attacker's task easier. The beta version of Mantra Security Toolkit contains following tools built onto it. Moreover Mantra follows the guidelines and structure of [http://firecat.fr/ FireCAT ] which makes it even more accessible. You can also always suggest any tools/ scripts that you would like see in the next release. 

== Tools ==
+'''Information Gathering'''

- ''Flagfox'' 
- ''JSView'' 
- ''PassiveRecon'' 
- ''Facebook search'' 
- ''People Search Engine'' 
- ''View Dependencies'' 
- ''Link Sidebar''

+'''Editors'''

- ''JSView'' 
- ''Firebug''

+'''Network Utilities'''

- ''FireFTP'' 
- ''DNS Cache'' 
- ''SQLite Manager'' 
- ''HTTP Fox'' 
- ''FireSSH''

+'''Miscellaneous'''

- ''Greasemonkey'' 
- ''Greasefire'' 
- ''CacheToggle'' 
- ''URL Flipper'' 
- ''Event Spy'' 
- ''Firebug Autocompleter'' 
- ''FirePHP'' 
- ''FireRainbow'' 
- ''Flashbug'' 
- ''Illuminations for Developers'' 
- ''In line Code Finder for Firebug'' 
- ''Inspect Context'' 
- ''Inspector Widget'' 
- ''Inspect This'' 
- ''Scriptish'' 
- ''Session Manager'' 
- ''Stacked Inspector''

+'''Application Auditing'''

- ''Hackbar'' 
- ''RESTClient'' 
- ''Tamper Data'' 
- ''Live HTTP Headers'' 
- ''RefControl'' 
- ''User Agent Switcher'' 
- ''Web Developer'' 
- ''DOM Inspector'' 
- ''Inspect This'' 
- ''Formfox'' 
- ''SQL Inject Me'' 
- ''XSS Me'' 
- ''Cookies Manager+'' 
- ''Firecookie'' 
- ''Autofill Forms'' 
- ''Cookie Monster'' 
- ''Fireforce'' 
- ''Groundspeed'' 
- ''Http Requester'' 
- ''Modify Headers'' 
- ''Poster'' 
- ''Ref Spoof'' 
- ''SeleniumExpertSeleniumIDE'' 
- ''SeleniumIDE'' 
- ''SOAClient'' 
- ''Websecurify''

+'''Proxy'''

- ''FoxyProxy'' 
- ''HttpFox'' ''
- ''Proxy Tool''

= News =
 
[http://www.computerweekly.com/blogs/open-source-insider/2011/10/free-software-testing-on-usb-for-students-to-web-developers-with-mantra.html Computer Weekly Article] 
[http://getmantra.com/forums/Thread-owasp-mantra-c0c0n-11-and-appseclatam-11-release OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release] 
[http://www.ekoparty.org/2011/workshops/owasp-mantra-security-framework.php Mantra at Ekoparty Security Conference] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Mantra at OWASP LatamTour - Buenos Aires, Argentina] 
Getting secure with Mantra: An open source penetration testing kit - 1. [http://www.computerworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss Computer World] 2. [http://www.cio.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ CIO] 3. [http://www.techworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ Tech World] 4. [http://www.cso.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss CSO] 
[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 Searchsecurity Screencast] 
[http://getmantra.com/forums/Thread-mantra-in-matriux-upcoming-release-leaked Mantra in Matriux Security Distribution] 
[http://getmantra.com/forums/Thread-mantra-in-backtrack-5 Mantra in Backtrack 5 - Penetration Testing Distribution] 
[http://www.facebook.com/photo.php?fbid=185544081485201&set=a.170788249627451.33033.170787489627527&type=1&ref=nf Mantra – Free and Open Source Security Framework' - published in India's first hacking magazine ClubHack Mag] 
[http://clubhack.com/2010/speakers/ ClubHACK 2010 Mantra release]

= Contributors =
 
"It is purpose that created us, purpose that connects us, purpose that pulls us, that guides us, that drives us, that binds us, it is purpose that defines us." - Agent Smith 
'''Project Leaders''' 
[[User:Abhi_M_Balakrishnan|Abhi M Balakrishnan]] 
[[User:Yashartha_Chaturvedi|Yashartha Chaturvedi]] 
[[User:Gokul_C_Gopinath|Gokul C Gopinath]] 

'''Other Members''' 
[[User:Maximiliano_Soler|Maximiliano Soler]] 
Gopu C Gopinath 

= Download =
 
" All things are difficult before they are easy." - Thomas Fuller 
'''OWASP Mantra c0c0n 11 and AppSecLatam 11 Release ( 0.71 Beta )''' 

{|
|'''Platform'''
|'''Details'''
|'''Links'''
|-
|'''Linux 32 bit'''
|MD5: 8e874e6d4e119111bf3dbcbe0f9a1c69
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Linux%2032%20bit/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20i686%20Release.tar.bz2/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20i686%20Release.tar.bz2 Mirror 2] [http://burnbit.com/torrent/178063/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_i686_Release_tar_bz2 Torrent]
|-
|'''Linux 64 bit'''
|MD5: d0ed8fce30a20ad907a97047985e8c05
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Linux%2064%20bit/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20-%20x86_64.tar.bz2/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20-%20x86_64.tar.bz2 Mirror 2] [http://burnbit.com/torrent/178679/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_x86_64_tar_bz2 Torrent]
|-
|'''Windows'''
|MD5: 98517c9f61561d8c656a2d2436f2333d
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Windows/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20Release.exe/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20Release.exe Mirror 2] [http://burnbit.com/torrent/178065/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_Release_exe Torrent]
|-
|'''Macintosh'''
|MD5: 949808a8f75fa0bcc5730cdcf73f7844
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Macintosh/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011.zip Mirror 2] [http://burnbit.com/torrent/178066/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_zip Torrent]
|-
|'''Source'''
|MD5: 6fdb5e9408261d741f24cb83df4b4066
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Source/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20Release%20Source.7z/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20Release%20Source.7z Mirror 2] [http://burnbit.com/torrent/178067/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_Release_Source_7z Torrent]
|}

[[Category:OWASP_Download]]

= Project About =

{{:Projects/OWASP Mantra - Security Framework | Project About}}

= Resources =
 

'''Project Pamphlets''' 

[http://www.owasp.org/images/e/e4/OWASP_Mantra-An_Introduction.pdf Project Pamphlet 1] 

'''Project Presentations''' 

[http://www.owasp.org/index.php/File:OWASP_Mantra-An_Introduction.pptx Project Presentation 1] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Project Presentation 2] 

'''Text Tutorials''' 

[http://getmantra.com/forums/Thread-introducing-passiverecon-by-justin-morehouse Introducing PassiveRecon by Justin Morehouse] 
[http://getmantra.com/forums/Thread-introducing-groundspeed-by-felipe Introducing Groundspeed by Felipe] 
[http://getmantra.com/forums/Thread-introducing-link-sidebar-by-varun-n Introducing Link Sidebar by Varun N] 
[http://getmantra.com/forums/Thread-introducing-proxytool-by-robert-rade Introducing ProxyTool by Robert Rade] 
[http://getmantra.com/forums/Thread-introducing-httpfox-by-martin-theimer Introducing HttpFox by Martin Theimer] 
[http://getmantra.com/forums/Thread-how-to-make-your-own-search-bar-item How to make your own search bar item] 
[http://getmantra.com/forums/Thread-how-to-use-moc-crawler How to use MoC crawler] 
[http://getmantra.com/forums/Thread-switching-between-languages-and-locales Switching between languages and locales] 
[http://getmantra.com/forums/Thread-running-mantra-and-firefox-together Running Mantra and Firefox together] 
[http://getmantra.com/forums/Thread-login-form-bypass-using-mantra-security-toolkit Login Form Bypass using Mantra Security Toolkit] 
[http://getmantra.com/forums/Thread-advanced-sql-injection-tutorial-complete-website-rooting Advanced SQL Injection Tutorial - Complete website rooting] 
[http://getmantra.com/forums/Thread-manual-crawling Manual Crawling] 
[http://getmantra.com/forums/Thread-introducing-flagfox Introducing Flagfox] 

'''Video Tutorials''' 

[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 SearchSecurity Screencast] 
ClubHACK 2010 - [http://www.youtube.com/watch?v=GBFxVAM3DLQ 1] [http://www.youtube.com/watch?v=bKACEDWKeyM 2] [http://www.youtube.com/watch?v=qpVHWVOPHTk 3] 
[http://www.youtube.com/watch?v=yTbB42sR208 Broken Authentication Demonstration] 
[http://www.youtube.com/watch?v=o1WVx6eYE-M Broken Session Demonstration] 
[http://www.youtube.com/watch?v=vvPeskadF-s Insecure Direct Object References Demonstration] 
[http://www.youtube.com/watch?v=NK3S-nwiGwA Cross Site Scripting Demonstration] 
[http://www.youtube.com/watch?v=p94ssETMbQ0& Introduction + How to use Mantra Security Toolkit] 
[http://www.youtube.com/watch?v=fxHlthnVJpA Introduction to Mantra (Arabic)] 
[http://www.youtube.com/watch?v=exyUAGseifI Introducing FoxyProxy (Arabic)]

==== Links ====
 
[http://www.getmantra.com/index.html Main Website] 
[http://www.getmantra.com/forums/ Discussion Forums] 
[http://www.facebook.com/getmantra/ Facebook Page] 
[http://getmantra.tumblr.com/ Tumblr] 
[http://twitter.com/getmantra Twitter] 
[http://vimeo.com/getmantra Vimeo] 
[http://sourceforge.net/projects/getmantra/ Sourceforge] 
[http://code.google.com/p/getmantra/ Google Code] 
[http://www.youtube.com/getmantra Youtube]

__NOTOC__ <headertabs />

[[Category:OWASP_Tool]] [[Category:OWASP_Alpha_Quality_Tool]] [[Category:OWASP_Project|Mantra - Security Framework]]
[[Category:OWASP Download]]

OWASP Mantra - Security Framework

2011-12-30T17:30:01Z

Yashartha Chaturvedi:

==== Main ====

= Overview =

[[Image:OWASP Mantra Security Framework.jpg|right|200px|OWASP Mantra Security Framework.jpg]] 

*Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software.
*Mantra is lite, flexible, portable and user friendly with a nice graphical user interface. You can carry it in memory cards, flash drives, CD/DVDs, etc. It can be run natively on Linux, Windows and Mac platforms. It can also be installed on to your system within minutes. Mantra is absolutely free of cost and takes no time for you to set up.

= Project Goals =

#Create an ecosystem for hackers based on browser
#To bring the attention of security people to the potential of a browser based security platform
#Provide easy to use and portable platform for demonstrating common web based attacks( read training )
#To associate with other security tools/products to make a better environment. Eg:
##It can be a nice addition to security distribution OSs like OWASP Live CD
##It can be used to solve basic levels of CTF contests
##It can associate with projects like DVWA to showcase attacks
##It can bring functions like crawler, SQL injection scanner etc by installing extensions.

= Main Links =

'''[http://getmantra.com/download/index.html Download Mantra - Security Framework]''' 

*[http://www.youtube.com/watch?v=GBFxVAM3DLQ Conference Video 1]
*[http://www.youtube.com/watch?v=bKACEDWKeyM Conference Video 2]
*[http://www.youtube.com/watch?v=qpVHWVOPHTk Conference Video 3]

*[http://chmag.in/article/feb2011/mantra-%E2%80%93-free-and-open-source-security-framework Article/Publication ]

 

= Tools =
 " A sword never kills anybody; it is a tool in the killer's hand." - Lucius Annaeus Seneca 
Mantra is a powerful set of tools to make the attacker's task easier. The beta version of Mantra Security Toolkit contains following tools built onto it. Moreover Mantra follows the guidelines and structure of [http://firecat.fr/ FireCAT ] which makes it even more accessible. You can also always suggest any tools/ scripts that you would like see in the next release. 

== Tools ==
+'''Information Gathering'''

- ''Flagfox'' 
- ''JSView'' 
- ''PassiveRecon'' 
- ''Facebook search'' 
- ''People Search Engine'' 
- ''View Dependencies'' 
- ''Link Sidebar''

+'''Editors'''

- ''JSView'' 
- ''Firebug''

+'''Network Utilities'''

- ''FireFTP'' 
- ''DNS Cache'' 
- ''SQLite Manager'' 
- ''HTTP Fox'' 
- ''FireSSH''

+'''Miscellaneous'''

- ''Greasemonkey'' 
- ''Greasefire'' 
- ''CacheToggle'' 
- ''URL Flipper'' 
- ''Event Spy'' 
- ''Firebug Autocompleter'' 
- ''FirePHP'' 
- ''FireRainbow'' 
- ''Flashbug'' 
- ''Illuminations for Developers'' 
- ''In line Code Finder for Firebug'' 
- ''Inspect Context'' 
- ''Inspector Widget'' 
- ''Inspect This'' 
- ''Scriptish'' 
- ''Session Manager'' 
- ''Stacked Inspector''

+'''Application Auditing'''

- ''Hackbar'' 
- ''RESTClient'' 
- ''Tamper Data'' 
- ''Live HTTP Headers'' 
- ''RefControl'' 
- ''User Agent Switcher'' 
- ''Web Developer'' 
- ''DOM Inspector'' 
- ''Inspect This'' 
- ''Formfox'' 
- ''SQL Inject Me'' 
- ''XSS Me'' 
- ''Cookies Manager+'' 
- ''Firecookie'' 
- ''Autofill Forms'' 
- ''Cookie Monster'' 
- ''Fireforce'' 
- ''Groundspeed'' 
- ''Http Requester'' 
- ''Modify Headers'' 
- ''Poster'' 
- ''Ref Spoof'' 
- ''SeleniumExpertSeleniumIDE'' 
- ''SeleniumIDE'' 
- ''SOAClient'' 
- ''Websecurify''

+'''Proxy'''

- ''FoxyProxy'' 
- ''HttpFox'' ''
- ''Proxy Tool''

= News =
 
[http://www.computerweekly.com/blogs/open-source-insider/2011/10/free-software-testing-on-usb-for-students-to-web-developers-with-mantra.html Computer Weekly Article] 
[http://getmantra.com/forums/Thread-owasp-mantra-c0c0n-11-and-appseclatam-11-release OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release] 
[http://www.ekoparty.org/2011/workshops/owasp-mantra-security-framework.php Mantra at Ekoparty Security Conference] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Mantra at OWASP LatamTour - Buenos Aires, Argentina] 
Getting secure with Mantra: An open source penetration testing kit - 1. [http://www.computerworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss Computer World] 2. [http://www.cio.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ CIO] 3. [http://www.techworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ Tech World] 4. [http://www.cso.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss CSO] 
[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 Searchsecurity Screencast] 
[http://getmantra.com/forums/Thread-mantra-in-matriux-upcoming-release-leaked Mantra in Matriux Security Distribution] 
[http://getmantra.com/forums/Thread-mantra-in-backtrack-5 Mantra in Backtrack 5 - Penetration Testing Distribution] 
[http://www.facebook.com/photo.php?fbid=185544081485201&set=a.170788249627451.33033.170787489627527&type=1&ref=nf Mantra – Free and Open Source Security Framework' - published in India's first hacking magazine ClubHack Mag] 
[http://clubhack.com/2010/speakers/ ClubHACK 2010 Mantra release]

= Contributors =
 
"It is purpose that created us, purpose that connects us, purpose that pulls us, that guides us, that drives us, that binds us, it is purpose that defines us." - Agent Smith 
'''Project Leaders''' 
[[User:Abhi_M_Balakrishnan|Abhi M Balakrishnan]] 
[[User:Yashartha_Chaturvedi|Yashartha Chaturvedi]] 
[[User:Gokul_C_Gopinath|Gokul C Gopinath]] 

'''Other Members''' 
[[User:Maximiliano_Soler|Maximiliano Soler]] 
Gopu C Gopinath 

= Download =
 
" All things are difficult before they are easy." - Thomas Fuller 
'''OWASP Mantra c0c0n 11 and AppSecLatam 11 Release ( 0.71 Beta )''' 

{|
|'''Platform'''
|'''Details'''
|'''Links'''
|-
|'''Linux 32 bit'''
|MD5: 8e874e6d4e119111bf3dbcbe0f9a1c69
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Linux%2032%20bit/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20i686%20Release.tar.bz2/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20i686%20Release.tar.bz2 Mirror 2] [http://burnbit.com/torrent/178063/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_i686_Release_tar_bz2 Torrent]
|-
|'''Linux 64 bit'''
|MD5: d0ed8fce30a20ad907a97047985e8c05
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Linux%2064%20bit/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20-%20x86_64.tar.bz2/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20-%20x86_64.tar.bz2 Mirror 2] [http://burnbit.com/torrent/178679/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_x86_64_tar_bz2 Torrent]
|-
|'''Windows'''
|MD5: 98517c9f61561d8c656a2d2436f2333d
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Windows/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20Release.exe/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20Release.exe Mirror 2] [http://burnbit.com/torrent/178065/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_Release_exe Torrent]
|-
|'''Macintosh'''
|MD5: 949808a8f75fa0bcc5730cdcf73f7844
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Macintosh/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011.zip Mirror 2] [http://burnbit.com/torrent/178066/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_zip Torrent]
|-
|'''Source'''
|MD5: 6fdb5e9408261d741f24cb83df4b4066
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Source/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20Release%20Source.7z/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20Release%20Source.7z Mirror 2] [http://burnbit.com/torrent/178067/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_Release_Source_7z Torrent]
|}

[[Category:OWASP_Download]]

= Project About =

{{:Projects/OWASP Mantra - Security Framework | Project About}}

= Resources =
 

'''Project Pamphlets''' 

[http://www.owasp.org/images/e/e4/OWASP_Mantra-An_Introduction.pdf Project Pamphlet 1] 

'''Project Presentations''' 

[http://www.owasp.org/index.php/File:OWASP_Mantra-An_Introduction.pptx Project Presentation 1] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Project Presentation 2] 

'''Text Tutorials''' 

[http://getmantra.com/forums/Thread-introducing-passiverecon-by-justin-morehouse Introducing PassiveRecon by Justin Morehouse] 
[http://getmantra.com/forums/Thread-introducing-groundspeed-by-felipe Introducing Groundspeed by Felipe] 
[http://getmantra.com/forums/Thread-introducing-link-sidebar-by-varun-n Introducing Link Sidebar by Varun N] 
[http://getmantra.com/forums/Thread-introducing-proxytool-by-robert-rade Introducing ProxyTool by Robert Rade] 
[http://getmantra.com/forums/Thread-introducing-httpfox-by-martin-theimer Introducing HttpFox by Martin Theimer] 
[http://getmantra.com/forums/Thread-how-to-make-your-own-search-bar-item How to make your own search bar item] 
[http://getmantra.com/forums/Thread-how-to-use-moc-crawler How to use MoC crawler] 
[http://getmantra.com/forums/Thread-switching-between-languages-and-locales Switching between languages and locales] 
[http://getmantra.com/forums/Thread-running-mantra-and-firefox-together Running Mantra and Firefox together] 
[http://getmantra.com/forums/Thread-login-form-bypass-using-mantra-security-toolkit Login Form Bypass using Mantra Security Toolkit] 
[http://getmantra.com/forums/Thread-advanced-sql-injection-tutorial-complete-website-rooting Advanced SQL Injection Tutorial - Complete website rooting] 
[http://getmantra.com/forums/Thread-manual-crawling Manual Crawling] 
[http://getmantra.com/forums/Thread-introducing-flagfox Introducing Flagfox] 

'''Video Tutorials''' 

[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 SearchSecurity Screencast] 
ClubHACK 2010 - [http://www.youtube.com/watch?v=GBFxVAM3DLQ 1] [http://www.youtube.com/watch?v=bKACEDWKeyM 2] [http://www.youtube.com/watch?v=qpVHWVOPHTk 3] 
[http://www.youtube.com/watch?v=yTbB42sR208 Broken Authentication Demonstration] 
[http://www.youtube.com/watch?v=o1WVx6eYE-M Broken Session Demonstration] 
[http://www.youtube.com/watch?v=vvPeskadF-s Insecure Direct Object References Demonstration] 
[http://www.youtube.com/watch?v=NK3S-nwiGwA Cross Site Scripting Demonstration] 
[http://www.youtube.com/watch?v=p94ssETMbQ0& Introduction + How to use Mantra Security Toolkit] 
[http://www.youtube.com/watch?v=fxHlthnVJpA Introduction to Mantra (Arabic)] 
[http://www.youtube.com/watch?v=exyUAGseifI Introducing FoxyProxy (Arabic)]

==== Links ====
 
[http://www.getmantra.com/index.html Main Website] 
[http://www.getmantra.com/forums/ Discussion Forums] 
[http://www.facebook.com/getmantra/ Facebook Page] 
[http://getmantra.tumblr.com/ Tumblr] 
[http://twitter.com/getmantra Twitter] 
[http://vimeo.com/getmantra Vimeo] 
[http://sourceforge.net/projects/getmantra/ Sourceforge] 
[http://code.google.com/p/getmantra/ Google Code] 
[http://www.youtube.com/getmantra Youtube]

__NOTOC__ <headertabs />

[[Category:OWASP_Tool]] [[Category:OWASP_Alpha_Quality_Tool]] [[Category:OWASP_Project|Mantra - Security Framework]]
[[Category:OWASP Download]]

OWASP Mantra - Security Framework

2011-12-21T14:56:21Z

Yashartha Chaturvedi:

==== Main ====

= Overview =

[[Image:OWASP Mantra Security Framework.jpg|right|200px|OWASP Mantra Security Framework.jpg]] 

*Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software.
*Mantra is lite, flexible, portable and user friendly with a nice graphical user interface. You can carry it in memory cards, flash drives, CD/DVDs, etc. It can be run natively on Linux, Windows and Mac platforms. It can also be installed on to your system within minutes. Mantra is absolutely free of cost and takes no time for you to set up.

= Project Goals =

#Create an ecosystem for hackers based on browser
#To bring the attention of security people to the potential of a browser based security platform
#Provide easy to use and portable platform for demonstrating common web based attacks( read training )
#To associate with other security tools/products to make a better environment. Eg:
##It can be a nice addition to security distribution OSs like OWASP Live CD
##It can be used to solve basic levels of CTF contests
##It can associate with projects like DVWA to showcase attacks
##It can bring functions like crawler, SQL injection scanner etc by installing extensions.

= Main Links =

'''[http://getmantra.com/download/index.html Download Mantra - Security Framework]''' 

*[http://www.youtube.com/watch?v=GBFxVAM3DLQ Conference Video 1]
*[http://www.youtube.com/watch?v=bKACEDWKeyM Conference Video 2]
*[http://www.youtube.com/watch?v=qpVHWVOPHTk Conference Video 3]

*[http://chmag.in/article/feb2011/mantra-%E2%80%93-free-and-open-source-security-framework Article/Publication ]

 

= Tools =
 " A sword never kills anybody; it is a tool in the killer's hand." - Lucius Annaeus Seneca 
Mantra is a powerful set of tools to make the attacker's task easier. The beta version of Mantra Security Toolkit contains following tools built onto it. Moreover Mantra follows the guidelines and structure of [http://firecat.fr/ FireCAT ] which makes it even more accessible. You can also always suggest any tools/ scripts that you would like see in the next release. 

#'''Information Gathering''' 
##'''Whois''' 
###''Flagfox'' 
##'''Location Info''' 
###''Flagfox'' 
##'''Enumeration and Fingerprint''' 
###''Host Spy'' 
###''JSView'' 
###''PassiveRecon'' 
###''View Dependencies'' 
###''Wappalyzer'' 
##'''Data Mining''' 
###''People Search Engine'' 
###''Facebook search'' 
#'''Editors''' 
###''Cert Viewer Plus'' 
###''Firebug'' 
###''JSView'' 
#'''Network Utilities''' 
##'''Protocols and applications''' 
###''Fire FTP'' 
###''DNS Cache'' 
###''SQLite Manager'' 
##'''Sniffers''' 
###''HTTP Fox'' 
##'''Password''' 
###''CryptoFox 2.0'' 
#'''Misc''' 
##'''Tweaks and Hacks''' 
###''Greasemonkey'' 
###''Greasefire'' 
##'''Malware scanner''' 
###''Web of Trust'' 
##'''Automation''' 
###''iMacros'' 
##'''Others''' 
###''CacheToggle 0.6'' 
###''URL Flipper'' 
#'''Application Auditing''' 
###''Hackbar'' 
###''JavaScript Deobfuscator'' 
###''RESTClient'' 
###''Tamper Data'' 
###''Live HTTP Headers'' 
###''RefControl'' 
###''User Agent Switcher'' 
###''Web Developer'' 
###''DOM Inspector'' 
###''Inspect This'' 
###''Formfox'' 
###'''Exploit Me''' 
####''Access Me'' 
####''SQL Inject Me'' 
####''XSS Me'' 
###'''Cookies''' 
####''Cookies Manager+ 1.5.1'' 
####''Firecookie'' 
#'''Proxy''' 
##''FoxyProxy Standard 2.22.6'' 
##''HttpFox'' 

= News =
 
[http://www.computerweekly.com/blogs/open-source-insider/2011/10/free-software-testing-on-usb-for-students-to-web-developers-with-mantra.html Computer Weekly Article] 
[http://getmantra.com/forums/Thread-owasp-mantra-c0c0n-11-and-appseclatam-11-release OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release] 
[http://www.ekoparty.org/2011/workshops/owasp-mantra-security-framework.php Mantra at Ekoparty Security Conference] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Mantra at OWASP LatamTour - Buenos Aires, Argentina] 
Getting secure with Mantra: An open source penetration testing kit - 1. [http://www.computerworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss Computer World] 2. [http://www.cio.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ CIO] 3. [http://www.techworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ Tech World] 4. [http://www.cso.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss CSO] 
[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 Searchsecurity Screencast] 
[http://getmantra.com/forums/Thread-mantra-in-matriux-upcoming-release-leaked Mantra in Matriux Security Distribution] 
[http://getmantra.com/forums/Thread-mantra-in-backtrack-5 Mantra in Backtrack 5 - Penetration Testing Distribution] 
[http://www.facebook.com/photo.php?fbid=185544081485201&set=a.170788249627451.33033.170787489627527&type=1&ref=nf Mantra – Free and Open Source Security Framework' - published in India's first hacking magazine ClubHack Mag] 
[http://clubhack.com/2010/speakers/ ClubHACK 2010 Mantra release]

= Contributors =
 
"It is purpose that created us, purpose that connects us, purpose that pulls us, that guides us, that drives us, that binds us, it is purpose that defines us." - Agent Smith 
'''Project Leaders''' 
[[User:Abhi_M_Balakrishnan|Abhi M Balakrishnan]] 
[[User:Yashartha_Chaturvedi|Yashartha Chaturvedi]] 
[[User:Gokul_C_Gopinath|Gokul C Gopinath]] 

'''Other Members''' 
[[User:Maximiliano_Soler|Maximiliano Soler]] 
Gopu C Gopinath 

= Download =
 
" All things are difficult before they are easy." - Thomas Fuller 
'''OWASP Mantra c0c0n 11 and AppSecLatam 11 Release ( 0.71 Beta )''' 

{|
|'''Platform'''
|'''Details'''
|'''Links'''
|-
|'''Linux 32 bit'''
|MD5: 8e874e6d4e119111bf3dbcbe0f9a1c69
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Linux%2032%20bit/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20i686%20Release.tar.bz2/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20i686%20Release.tar.bz2 Mirror 2] [http://burnbit.com/torrent/178063/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_i686_Release_tar_bz2 Torrent]
|-
|'''Linux 64 bit'''
|MD5: d0ed8fce30a20ad907a97047985e8c05
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Linux%2064%20bit/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20-%20x86_64.tar.bz2/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20-%20x86_64.tar.bz2 Mirror 2] [http://burnbit.com/torrent/178679/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_x86_64_tar_bz2 Torrent]
|-
|'''Windows'''
|MD5: 98517c9f61561d8c656a2d2436f2333d
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Windows/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20Release.exe/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20Release.exe Mirror 2] [http://burnbit.com/torrent/178065/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_Release_exe Torrent]
|-
|'''Macintosh'''
|MD5: 949808a8f75fa0bcc5730cdcf73f7844
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Macintosh/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011.zip Mirror 2] [http://burnbit.com/torrent/178066/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_zip Torrent]
|-
|'''Source'''
|MD5: 6fdb5e9408261d741f24cb83df4b4066
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Source/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20Release%20Source.7z/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20Release%20Source.7z Mirror 2] [http://burnbit.com/torrent/178067/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_Release_Source_7z Torrent]
|}

[[Category:OWASP_Download]]

= Project About =

{{:Projects/OWASP Mantra - Security Framework | Project About}}

= Resources =
 

'''Project Pamphlets''' 

[http://www.owasp.org/images/e/e4/OWASP_Mantra-An_Introduction.pdf Project Pamphlet 1] 

'''Project Presentations''' 

[http://www.owasp.org/index.php/File:OWASP_Mantra-An_Introduction.pptx Project Presentation 1] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Project Presentation 2] 

'''Text Tutorials''' 

[http://getmantra.com/forums/Thread-introducing-passiverecon-by-justin-morehouse Introducing PassiveRecon by Justin Morehouse] 
[http://getmantra.com/forums/Thread-introducing-groundspeed-by-felipe Introducing Groundspeed by Felipe] 
[http://getmantra.com/forums/Thread-introducing-link-sidebar-by-varun-n Introducing Link Sidebar by Varun N] 
[http://getmantra.com/forums/Thread-introducing-proxytool-by-robert-rade Introducing ProxyTool by Robert Rade] 
[http://getmantra.com/forums/Thread-introducing-httpfox-by-martin-theimer Introducing HttpFox by Martin Theimer] 
[http://getmantra.com/forums/Thread-how-to-make-your-own-search-bar-item How to make your own search bar item] 
[http://getmantra.com/forums/Thread-how-to-use-moc-crawler How to use MoC crawler] 
[http://getmantra.com/forums/Thread-switching-between-languages-and-locales Switching between languages and locales] 
[http://getmantra.com/forums/Thread-running-mantra-and-firefox-together Running Mantra and Firefox together] 
[http://getmantra.com/forums/Thread-login-form-bypass-using-mantra-security-toolkit Login Form Bypass using Mantra Security Toolkit] 
[http://getmantra.com/forums/Thread-advanced-sql-injection-tutorial-complete-website-rooting Advanced SQL Injection Tutorial - Complete website rooting] 
[http://getmantra.com/forums/Thread-manual-crawling Manual Crawling] 
[http://getmantra.com/forums/Thread-introducing-flagfox Introducing Flagfox] 

'''Video Tutorials''' 

[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 SearchSecurity Screencast] 
ClubHACK 2010 - [http://www.youtube.com/watch?v=GBFxVAM3DLQ 1] [http://www.youtube.com/watch?v=bKACEDWKeyM 2] [http://www.youtube.com/watch?v=qpVHWVOPHTk 3] 
[http://www.youtube.com/watch?v=yTbB42sR208 Broken Authentication Demonstration] 
[http://www.youtube.com/watch?v=o1WVx6eYE-M Broken Session Demonstration] 
[http://www.youtube.com/watch?v=vvPeskadF-s Insecure Direct Object References Demonstration] 
[http://www.youtube.com/watch?v=NK3S-nwiGwA Cross Site Scripting Demonstration] 
[http://www.youtube.com/watch?v=p94ssETMbQ0& Introduction + How to use Mantra Security Toolkit] 
[http://www.youtube.com/watch?v=fxHlthnVJpA Introduction to Mantra (Arabic)] 
[http://www.youtube.com/watch?v=exyUAGseifI Introducing FoxyProxy (Arabic)]

==== Links ====
 
[http://www.getmantra.com/index.html Main Website] 
[http://www.getmantra.com/forums/ Discussion Forums] 
[http://www.facebook.com/getmantra/ Facebook Page] 
[http://getmantra.tumblr.com/ Tumblr] 
[http://twitter.com/getmantra Twitter] 
[http://vimeo.com/getmantra Vimeo] 
[http://sourceforge.net/projects/getmantra/ Sourceforge] 
[http://code.google.com/p/getmantra/ Google Code] 
[http://www.youtube.com/getmantra Youtube]

__NOTOC__ <headertabs />

[[Category:OWASP_Tool]] [[Category:OWASP_Alpha_Quality_Tool]] [[Category:OWASP_Project|Mantra - Security Framework]]
[[Category:OWASP Download]]

OWASP Mantra - Security Framework

2011-12-21T14:53:03Z

Yashartha Chaturvedi:

==== Main ====

= Overview =

[[Image:OWASP Mantra Security Framework.jpg|right|200px|OWASP Mantra Security Framework.jpg]] 

*Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software.
*Mantra is lite, flexible, portable and user friendly with a nice graphical user interface. You can carry it in memory cards, flash drives, CD/DVDs, etc. It can be run natively on Linux, Windows and Mac platforms. It can also be installed on to your system within minutes. Mantra is absolutely free of cost and takes no time for you to set up.

= Project Goals =

#Create an ecosystem for hackers based on browser
#To bring the attention of security people to the potential of a browser based security platform
#Provide easy to use and portable platform for demonstrating common web based attacks( read training )
#To associate with other security tools/products to make a better environment. Eg:
##It can be a nice addition to security distribution OSs like OWASP Live CD
##It can be used to solve basic levels of CTF contests
##It can associate with projects like DVWA to showcase attacks
##It can bring functions like crawler, SQL injection scanner etc by installing extensions.

= Main Links =

'''[http://getmantra.com/download/index.html Download Mantra - Security Framework]''' 

*[http://www.youtube.com/watch?v=GBFxVAM3DLQ Conference Video 1]
*[http://www.youtube.com/watch?v=bKACEDWKeyM Conference Video 2]
*[http://www.youtube.com/watch?v=qpVHWVOPHTk Conference Video 3]

*[http://chmag.in/article/feb2011/mantra-%E2%80%93-free-and-open-source-security-framework Article/Publication ]

 

==== Tools ====
 " A sword never kills anybody; it is a tool in the killer's hand." - Lucius Annaeus Seneca 
Mantra is a powerful set of tools to make the attacker's task easier. The beta version of Mantra Security Toolkit contains following tools built onto it. Moreover Mantra follows the guidelines and structure of [http://firecat.fr/ FireCAT ] which makes it even more accessible. You can also always suggest any tools/ scripts that you would like see in the next release. 

#'''Information Gathering''' 
##'''Whois''' 
###''Flagfox'' 
##'''Location Info''' 
###''Flagfox'' 
##'''Enumeration and Fingerprint''' 
###''Host Spy'' 
###''JSView'' 
###''PassiveRecon'' 
###''View Dependencies'' 
###''Wappalyzer'' 
##'''Data Mining''' 
###''People Search Engine'' 
###''Facebook search'' 
#'''Editors''' 
###''Cert Viewer Plus'' 
###''Firebug'' 
###''JSView'' 
#'''Network Utilities''' 
##'''Protocols and applications''' 
###''Fire FTP'' 
###''DNS Cache'' 
###''SQLite Manager'' 
##'''Sniffers''' 
###''HTTP Fox'' 
##'''Password''' 
###''CryptoFox 2.0'' 
#'''Misc''' 
##'''Tweaks and Hacks''' 
###''Greasemonkey'' 
###''Greasefire'' 
##'''Malware scanner''' 
###''Web of Trust'' 
##'''Automation''' 
###''iMacros'' 
##'''Others''' 
###''CacheToggle 0.6'' 
###''URL Flipper'' 
#'''Application Auditing''' 
###''Hackbar'' 
###''JavaScript Deobfuscator'' 
###''RESTClient'' 
###''Tamper Data'' 
###''Live HTTP Headers'' 
###''RefControl'' 
###''User Agent Switcher'' 
###''Web Developer'' 
###''DOM Inspector'' 
###''Inspect This'' 
###''Formfox'' 
###'''Exploit Me''' 
####''Access Me'' 
####''SQL Inject Me'' 
####''XSS Me'' 
###'''Cookies''' 
####''Cookies Manager+ 1.5.1'' 
####''Firecookie'' 
#'''Proxy''' 
##''FoxyProxy Standard 2.22.6'' 
##''HttpFox'' 

==== News ====
 
[http://www.computerweekly.com/blogs/open-source-insider/2011/10/free-software-testing-on-usb-for-students-to-web-developers-with-mantra.html Computer Weekly Article] 
[http://getmantra.com/forums/Thread-owasp-mantra-c0c0n-11-and-appseclatam-11-release OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release] 
[http://www.ekoparty.org/2011/workshops/owasp-mantra-security-framework.php Mantra at Ekoparty Security Conference] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Mantra at OWASP LatamTour - Buenos Aires, Argentina] 
Getting secure with Mantra: An open source penetration testing kit - 1. [http://www.computerworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss Computer World] 2. [http://www.cio.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ CIO] 3. [http://www.techworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ Tech World] 4. [http://www.cso.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss CSO] 
[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 Searchsecurity Screencast] 
[http://getmantra.com/forums/Thread-mantra-in-matriux-upcoming-release-leaked Mantra in Matriux Security Distribution] 
[http://getmantra.com/forums/Thread-mantra-in-backtrack-5 Mantra in Backtrack 5 - Penetration Testing Distribution] 
[http://www.facebook.com/photo.php?fbid=185544081485201&set=a.170788249627451.33033.170787489627527&type=1&ref=nf Mantra – Free and Open Source Security Framework' - published in India's first hacking magazine ClubHack Mag] 
[http://clubhack.com/2010/speakers/ ClubHACK 2010 Mantra release]

= Contributors =
 
"It is purpose that created us, purpose that connects us, purpose that pulls us, that guides us, that drives us, that binds us, it is purpose that defines us." - Agent Smith 
'''Project Leaders''' 
[[User:Abhi_M_Balakrishnan|Abhi M Balakrishnan]] 
[[User:Yashartha_Chaturvedi|Yashartha Chaturvedi]] 
[[User:Gokul_C_Gopinath|Gokul C Gopinath]] 

'''Other Members''' 
[[User:Maximiliano_Soler|Maximiliano Soler]] 
Gopu C Gopinath 

= Download =
 
" All things are difficult before they are easy." - Thomas Fuller 
'''OWASP Mantra c0c0n 11 and AppSecLatam 11 Release ( 0.71 Beta )''' 

{|
|'''Platform'''
|'''Details'''
|'''Links'''
|-
|'''Linux 32 bit'''
|MD5: 8e874e6d4e119111bf3dbcbe0f9a1c69
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Linux%2032%20bit/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20i686%20Release.tar.bz2/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20i686%20Release.tar.bz2 Mirror 2] [http://burnbit.com/torrent/178063/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_i686_Release_tar_bz2 Torrent]
|-
|'''Linux 64 bit'''
|MD5: d0ed8fce30a20ad907a97047985e8c05
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Linux%2064%20bit/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20-%20x86_64.tar.bz2/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20-%20x86_64.tar.bz2 Mirror 2] [http://burnbit.com/torrent/178679/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_x86_64_tar_bz2 Torrent]
|-
|'''Windows'''
|MD5: 98517c9f61561d8c656a2d2436f2333d
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Windows/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20Release.exe/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20Release.exe Mirror 2] [http://burnbit.com/torrent/178065/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_Release_exe Torrent]
|-
|'''Macintosh'''
|MD5: 949808a8f75fa0bcc5730cdcf73f7844
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Macintosh/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011.zip Mirror 2] [http://burnbit.com/torrent/178066/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_zip Torrent]
|-
|'''Source'''
|MD5: 6fdb5e9408261d741f24cb83df4b4066
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Source/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20Release%20Source.7z/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20Release%20Source.7z Mirror 2] [http://burnbit.com/torrent/178067/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_Release_Source_7z Torrent]
|}

[[Category:OWASP_Download]]

= Project About =

{{:Projects/OWASP Mantra - Security Framework | Project About}}

= Resources =
 

'''Project Pamphlets''' 

[http://www.owasp.org/images/e/e4/OWASP_Mantra-An_Introduction.pdf Project Pamphlet 1] 

'''Project Presentations''' 

[http://www.owasp.org/index.php/File:OWASP_Mantra-An_Introduction.pptx Project Presentation 1] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Project Presentation 2] 

'''Text Tutorials''' 

[http://getmantra.com/forums/Thread-introducing-passiverecon-by-justin-morehouse Introducing PassiveRecon by Justin Morehouse] 
[http://getmantra.com/forums/Thread-introducing-groundspeed-by-felipe Introducing Groundspeed by Felipe] 
[http://getmantra.com/forums/Thread-introducing-link-sidebar-by-varun-n Introducing Link Sidebar by Varun N] 
[http://getmantra.com/forums/Thread-introducing-proxytool-by-robert-rade Introducing ProxyTool by Robert Rade] 
[http://getmantra.com/forums/Thread-introducing-httpfox-by-martin-theimer Introducing HttpFox by Martin Theimer] 
[http://getmantra.com/forums/Thread-how-to-make-your-own-search-bar-item How to make your own search bar item] 
[http://getmantra.com/forums/Thread-how-to-use-moc-crawler How to use MoC crawler] 
[http://getmantra.com/forums/Thread-switching-between-languages-and-locales Switching between languages and locales] 
[http://getmantra.com/forums/Thread-running-mantra-and-firefox-together Running Mantra and Firefox together] 
[http://getmantra.com/forums/Thread-login-form-bypass-using-mantra-security-toolkit Login Form Bypass using Mantra Security Toolkit] 
[http://getmantra.com/forums/Thread-advanced-sql-injection-tutorial-complete-website-rooting Advanced SQL Injection Tutorial - Complete website rooting] 
[http://getmantra.com/forums/Thread-manual-crawling Manual Crawling] 
[http://getmantra.com/forums/Thread-introducing-flagfox Introducing Flagfox] 

'''Video Tutorials''' 

[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 SearchSecurity Screencast] 
ClubHACK 2010 - [http://www.youtube.com/watch?v=GBFxVAM3DLQ 1] [http://www.youtube.com/watch?v=bKACEDWKeyM 2] [http://www.youtube.com/watch?v=qpVHWVOPHTk 3] 
[http://www.youtube.com/watch?v=yTbB42sR208 Broken Authentication Demonstration] 
[http://www.youtube.com/watch?v=o1WVx6eYE-M Broken Session Demonstration] 
[http://www.youtube.com/watch?v=vvPeskadF-s Insecure Direct Object References Demonstration] 
[http://www.youtube.com/watch?v=NK3S-nwiGwA Cross Site Scripting Demonstration] 
[http://www.youtube.com/watch?v=p94ssETMbQ0& Introduction + How to use Mantra Security Toolkit] 
[http://www.youtube.com/watch?v=fxHlthnVJpA Introduction to Mantra (Arabic)] 
[http://www.youtube.com/watch?v=exyUAGseifI Introducing FoxyProxy (Arabic)]

==== Links ====
 
[http://www.getmantra.com/index.html Main Website] 
[http://www.getmantra.com/forums/ Discussion Forums] 
[http://www.facebook.com/getmantra/ Facebook Page] 
[http://getmantra.tumblr.com/ Tumblr] 
[http://twitter.com/getmantra Twitter] 
[http://vimeo.com/getmantra Vimeo] 
[http://sourceforge.net/projects/getmantra/ Sourceforge] 
[http://code.google.com/p/getmantra/ Google Code] 
[http://www.youtube.com/getmantra Youtube]

__NOTOC__ <headertabs />

[[Category:OWASP_Tool]] [[Category:OWASP_Alpha_Quality_Tool]] [[Category:OWASP_Project|Mantra - Security Framework]]
[[Category:OWASP Download]]

OWASP Mantra - Security Framework

2011-10-20T12:03:17Z

Yashartha Chaturvedi:

==== Main ====

= Overview =

[[Image:OWASP Mantra Security Framework.jpg|right|200px|OWASP Mantra Security Framework.jpg]] 

*Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software.
*Mantra is lite, flexible, portable and user friendly with a nice graphical user interface. You can carry it in memory cards, flash drives, CD/DVDs, etc. It can be run natively on Linux, Windows and Mac platforms. It can also be installed on to your system within minutes. Mantra is absolutely free of cost and takes no time for you to set up.

= Project Goals =

#Create an ecosystem for hackers based on browser
#To bring the attention of security people to the potential of a browser based security platform
#Provide easy to use and portable platform for demonstrating common web based attacks( read training )
#To associate with other security tools/products to make a better environment. Eg:
##It can be a nice addition to security distribution OSs like OWASP Live CD
##It can be used to solve basic levels of CTF contests
##It can associate with projects like DVWA to showcase attacks
##It can bring functions like crawler, SQL injection scanner etc by installing extensions.

= Main Links =

'''[http://getmantra.com/download/index.html Download Mantra - Security Framework]''' 

*[http://www.youtube.com/watch?v=GBFxVAM3DLQ Conference Video 1]
*[http://www.youtube.com/watch?v=bKACEDWKeyM Conference Video 2]
*[http://www.youtube.com/watch?v=qpVHWVOPHTk Conference Video 3]

*[http://chmag.in/article/feb2011/mantra-%E2%80%93-free-and-open-source-security-framework Article/Publication ]

 

==== Tools ====
 " A sword never kills anybody; it is a tool in the killer's hand." - Lucius Annaeus Seneca 
Mantra is a powerful set of tools to make the attacker's task easier. The beta version of Mantra Security Toolkit contains following tools built onto it. Moreover Mantra follows the guidelines and structure of [http://firecat.fr/ FireCAT ] which makes it even more accessible. You can also always suggest any tools/ scripts that you would like see in the next release. 

#'''Information Gathering''' 
##'''Whois''' 
###''Flagfox'' 
##'''Location Info''' 
###''Flagfox'' 
##'''Enumeration and Fingerprint''' 
###''Host Spy'' 
###''JSView'' 
###''PassiveRecon'' 
###''View Dependencies'' 
###''Wappalyzer'' 
##'''Data Mining''' 
###''People Search Engine'' 
###''Facebook search'' 
#'''Editors''' 
###''Cert Viewer Plus'' 
###''Firebug'' 
###''JSView'' 
#'''Network Utilities''' 
##'''Protocols and applications''' 
###''Fire FTP'' 
###''DNS Cache'' 
###''SQLite Manager'' 
##'''Sniffers''' 
###''HTTP Fox'' 
##'''Password''' 
###''CryptoFox 2.0'' 
#'''Misc''' 
##'''Tweaks and Hacks''' 
###''Greasemonkey'' 
###''Greasefire'' 
##'''Malware scanner''' 
###''Web of Trust'' 
##'''Automation''' 
###''iMacros'' 
##'''Others''' 
###''CacheToggle 0.6'' 
###''URL Flipper'' 
#'''Application Auditing''' 
###''Hackbar'' 
###''JavaScript Deobfuscator'' 
###''RESTClient'' 
###''Tamper Data'' 
###''Live HTTP Headers'' 
###''RefControl'' 
###''User Agent Switcher'' 
###''Web Developer'' 
###''DOM Inspector'' 
###''Inspect This'' 
###''Formfox'' 
###'''Exploit Me''' 
####''Access Me'' 
####''SQL Inject Me'' 
####''XSS Me'' 
###'''Cookies''' 
####''Cookies Manager+ 1.5.1'' 
####''Firecookie'' 
#'''Proxy''' 
##''FoxyProxy Standard 2.22.6'' 
##''HttpFox'' 

==== News ====
 
[http://www.computerweekly.com/blogs/open-source-insider/2011/10/free-software-testing-on-usb-for-students-to-web-developers-with-mantra.html Computer Weekly Article] 
[http://getmantra.com/forums/Thread-owasp-mantra-c0c0n-11-and-appseclatam-11-release OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release] 
[http://www.ekoparty.org/2011/workshops/owasp-mantra-security-framework.php Mantra at Ekoparty Security Conference] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Mantra at OWASP LatamTour - Buenos Aires, Argentina] 
Getting secure with Mantra: An open source penetration testing kit - 1. [http://www.computerworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss Computer World] 2. [http://www.cio.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ CIO] 3. [http://www.techworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ Tech World] 4. [http://www.cso.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss CSO] 
[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 Searchsecurity Screencast] 
[http://getmantra.com/forums/Thread-mantra-in-matriux-upcoming-release-leaked Mantra in Matriux Security Distribution] 
[http://getmantra.com/forums/Thread-mantra-in-backtrack-5 Mantra in Backtrack 5 - Penetration Testing Distribution] 
[http://www.facebook.com/photo.php?fbid=185544081485201&set=a.170788249627451.33033.170787489627527&type=1&ref=nf Mantra – Free and Open Source Security Framework' - published in India's first hacking magazine ClubHack Mag] 
[http://clubhack.com/2010/speakers/ ClubHACK 2010 Mantra release]
==== Contributors ====
 
"It is purpose that created us, purpose that connects us, purpose that pulls us, that guides us, that drives us, that binds us, it is purpose that defines us." - Agent Smith 
'''Project Leaders''' 
[[User:Abhi_M_Balakrishnan|Abhi M Balakrishnan]] 
[[User:Yashartha_Chaturvedi|Yashartha Chaturvedi]] 
[[User:Gokul_C_Gopinath|Gokul C Gopinath]] 

'''Other Members''' 
[[User:Maximiliano_Soler|Maximiliano Soler]] 
Gopu C Gopinath 

==== Download ====
 
" All things are difficult before they are easy." - Thomas Fuller 
'''OWASP Mantra c0c0n 11 and AppSecLatam 11 Release ( 0.71 Beta )''' 

{|
|'''Platform'''
|'''Details'''
|'''Links'''
|-
|'''Linux 32 bit'''
|MD5: 8e874e6d4e119111bf3dbcbe0f9a1c69
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Linux%2032%20bit/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20i686%20Release.tar.bz2/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20i686%20Release.tar.bz2 Mirror 2] [http://burnbit.com/torrent/178063/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_i686_Release_tar_bz2 Torrent]
|-
|'''Linux 64 bit'''
|MD5: d0ed8fce30a20ad907a97047985e8c05
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Linux%2064%20bit/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20-%20x86_64.tar.bz2/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20-%20x86_64.tar.bz2 Mirror 2] [http://burnbit.com/torrent/178679/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_x86_64_tar_bz2 Torrent]
|-
|'''Windows'''
|MD5: 98517c9f61561d8c656a2d2436f2333d
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Windows/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20Release.exe/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20Release.exe Mirror 2] [http://burnbit.com/torrent/178065/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_Release_exe Torrent]
|-
|'''Macintosh'''
|MD5: 949808a8f75fa0bcc5730cdcf73f7844
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Macintosh/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011.zip/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011.zip Mirror 2] [http://burnbit.com/torrent/178066/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_zip Torrent]
|-
|'''Source'''
|MD5: 6fdb5e9408261d741f24cb83df4b4066
|[http://sourceforge.net/projects/getmantra/files/Mantra%20Security%20Toolkit/c0c0n%2011%20and%20AppSecLatam%2011/Source/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20Release%20Source.7z/download Mirror 1] [http://getmantra.googlecode.com/files/OWASP%20Mantra%20-%20c0c0n%2011%20and%20AppSecLatam%2011%20Release%20Source.7z Mirror 2] [http://burnbit.com/torrent/178067/OWASP_Mantra_c0c0n_11_and_AppSecLatam_11_Release_Source_7z Torrent]
|}

[[Category:OWASP_Download]]

==== Project About ====

{{:Projects/OWASP Mantra - Security Framework | Project About}}

==== Resources ====
 

'''Project Pamphlets''' 

[http://www.owasp.org/images/e/e4/OWASP_Mantra-An_Introduction.pdf Project Pamphlet 1] 

'''Project Presentations''' 

[http://www.owasp.org/index.php/File:OWASP_Mantra-An_Introduction.pptx Project Presentation 1] 
[https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Project Presentation 2] 

'''Text Tutorials''' 

[http://getmantra.com/forums/Thread-introducing-passiverecon-by-justin-morehouse Introducing PassiveRecon by Justin Morehouse] 
[http://getmantra.com/forums/Thread-introducing-groundspeed-by-felipe Introducing Groundspeed by Felipe] 
[http://getmantra.com/forums/Thread-introducing-link-sidebar-by-varun-n Introducing Link Sidebar by Varun N] 
[http://getmantra.com/forums/Thread-introducing-proxytool-by-robert-rade Introducing ProxyTool by Robert Rade] 
[http://getmantra.com/forums/Thread-introducing-httpfox-by-martin-theimer Introducing HttpFox by Martin Theimer] 
[http://getmantra.com/forums/Thread-how-to-make-your-own-search-bar-item How to make your own search bar item] 
[http://getmantra.com/forums/Thread-how-to-use-moc-crawler How to use MoC crawler] 
[http://getmantra.com/forums/Thread-switching-between-languages-and-locales Switching between languages and locales] 
[http://getmantra.com/forums/Thread-running-mantra-and-firefox-together Running Mantra and Firefox together] 
[http://getmantra.com/forums/Thread-login-form-bypass-using-mantra-security-toolkit Login Form Bypass using Mantra Security Toolkit] 
[http://getmantra.com/forums/Thread-advanced-sql-injection-tutorial-complete-website-rooting Advanced SQL Injection Tutorial - Complete website rooting] 
[http://getmantra.com/forums/Thread-manual-crawling Manual Crawling] 
[http://getmantra.com/forums/Thread-introducing-flagfox Introducing Flagfox] 

'''Video Tutorials''' 

[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 SearchSecurity Screencast] 
ClubHACK 2010 - [http://www.youtube.com/watch?v=GBFxVAM3DLQ 1] [http://www.youtube.com/watch?v=bKACEDWKeyM 2] [http://www.youtube.com/watch?v=qpVHWVOPHTk 3] 
[http://www.youtube.com/watch?v=yTbB42sR208 Broken Authentication Demonstration] 
[http://www.youtube.com/watch?v=o1WVx6eYE-M Broken Session Demonstration] 
[http://www.youtube.com/watch?v=vvPeskadF-s Insecure Direct Object References Demonstration] 
[http://www.youtube.com/watch?v=NK3S-nwiGwA Cross Site Scripting Demonstration] 
[http://www.youtube.com/watch?v=p94ssETMbQ0& Introduction + How to use Mantra Security Toolkit] 
[http://www.youtube.com/watch?v=fxHlthnVJpA Introduction to Mantra (Arabic)] 
[http://www.youtube.com/watch?v=exyUAGseifI Introducing FoxyProxy (Arabic)]

==== Links ====
 
[http://www.getmantra.com/index.html Main Website] 
[http://www.getmantra.com/forums/ Discussion Forums] 
[http://www.facebook.com/getmantra/ Facebook Page] 
[http://getmantra.tumblr.com/ Tumblr] 
[http://twitter.com/getmantra Twitter] 
[http://vimeo.com/getmantra Vimeo] 
[http://sourceforge.net/projects/getmantra/ Sourceforge] 
[http://code.google.com/p/getmantra/ Google Code] 
[http://www.youtube.com/getmantra Youtube]

__NOTOC__ <headertabs />

[[Category:OWASP_Tool]] [[Category:OWASP_Alpha_Quality_Tool]] [[Category:OWASP_Project|Mantra - Security Framework]]
[[Category:OWASP Download]]

Projects/OWASP Mantra - Security Framework/Releases/Current

2011-10-11T15:36:42Z

Yashartha Chaturvedi: Redirected page to Projects/OWASP Mantra - Security Framework/Releases/Mantra Security Toolkit - 0.71

#REDIRECT [[Projects/OWASP Mantra - Security Framework/Releases/Mantra_Security_Toolkit_-_0.71]]

Projects/OWASP Mantra - Security Framework

2011-10-11T15:34:08Z

Yashartha Chaturvedi:

{{Template:<includeonly>{{{1}}}</includeonly><noinclude>Project About</noinclude>
| project_name = OWASP Mantra - Security Framework
| project_home_page = OWASP Mantra - Security Framework
| project_description =Mantra is a security framework which can be very helpful in performing all the five phases of attacks including reconnaissance, scanning and enumeration, gaining access, escalation of privileges,maintaining access, and covering tracks. Apart from that it also contains a set of tools targeted for web developers and code debuggers which makes it handy for both offensive security and defensive security related tasks.

| project_license =[http://www.gnu.org/copyleft/fdl.html GNU Free Documentation 1.2 for documents] & [http://www.gnu.org/licenses/gpl-3.0.html GPL v3 for source code]

| leader_name1 = Abhi M BalaKrishnan
| leader_email1 = abhi@getmantra.com
| leader_username1 = Abhi_M_Balakrishnan

| maintainer_name1 = Yashartha Chaturvedi
| maintainer_email1 = yashartha@getmantra.com
| maintainer_username1 = Yashartha_Chaturvedi

| pamphlet_link = http://www.owasp.org/images/e/e4/OWASP_Mantra-An_Introduction.pdf

| presentation_link = http://www.owasp.org/index.php/File:OWASP_Mantra-An_Introduction.pptx

| mailing_list_name = https://lists.owasp.org/mailman/listinfo/owasp-mantra

| project_road_map = http://www.owasp.org/index.php/OWASP_Mantra_-_Security_Framework/Roadmap

| links_url1 = http://getmantra.com
| links_name1 = http://getmantra.com

| links_url6 =
| links_name6 =

| release_1 = Mantra Security Toolkit - 0.52
| release_2 = Mantra Security Toolkit - 0.61
| release_3 = Mantra Security Toolkit - 0.71
| release_4 =

| project_about_page = Projects/OWASP Mantra - Security Framework

}}

Projects/OWASP Mantra - Security Framework/Releases/Mantra Security Toolkit - 0.71

2011-10-11T15:28:37Z

{{Template: <includeonly>{{{1}}}</includeonly><noinclude>Release About</noinclude>
| project_name = OWASP Mantra - Security Framework

| project_home_page = OWASP Mantra - Security Framework

| release_name = Mantra Security Toolkit - 0.71

| release_date = 8th October 2011

| release_description =
third public beta release of Mantra Security Toolkit 0.71 release named [http://www.getmantra.com/ c0c0n 11 and AppSecLatam 11 release ] 

| release_license =
[http://www.gnu.org/copyleft/fdl.html GNU Free Documentation 1.2 for documents] & [http://www.gnu.org/licenses/gpl-3.0.html GPL v3 for source code]

| release_download_link = http://www.getmantra.com/download/index.html

| leader_name1 = Abhi M BalaKrishnan
| leader_email1 = abhi@getmantra.com
| leader_username1 = Abhi_M_Balakrishnan

| contributor_name1 = Yashartha Chaturvedi
| contributor_email1 = yashartha@getmantra.com
| contributor_username1 = Yashartha_Chaturvedi

| release_notes = https://www.owasp.org/index.php/Projects/OWASP_Mantra_-_Security_Framework/Releases/Mantra_Security_Toolkit_-_0.71/Notes

| links_url1 =
| links_name1 =
}}

Projects/OWASP Mantra - Security Framework/Releases/Mantra Security Toolkit - 0.71/Notes

2011-10-11T15:24:11Z

Yashartha Chaturvedi: Created page with "== The beta version of OWASP Mantra Security Toolkit Beta 0.71 contains following category of add-ons/tools, suggest any tool or script that you would like see in the next releas..."

== The beta version of OWASP Mantra Security Toolkit Beta 0.71 contains following category of add-ons/tools, suggest any tool or script that you would like see in the next release. ==

the complete list is available at http://www.getmantra.com/ayudha/index.html

== Tools ==

''
+'''Information Gathering''' 

- ''Whois'' 
- ''Location Info'' 
- ''Enumeration and Fingerprint'' 
- ''Data Mining'' 

+'''Editors''' 

- ''Cert Viewer Plus'' 
- ''Firebug'' 
- ''JSView'' 

+'''Network Utilities''' 

- ''Protocols and applications'' 
- ''Sniffers'' 
- ''Password'' 

+'''Miscellaneous''' 

- ''Tweaks and Hacks'' 
- ''Malware scanner'' 
- ''Automation'' 
- ''Others'' 

+'''Application Auditing''' 

- ''Hackbar'' 
- ''JavaScript Deobfuscator'' 
- ''RESTClient'' 
- ''Tamper Data'' 
- ''Live HTTP Headers'' 
- ''RefControl'' 
- ''User Agent Switcher'' 
- ''Web Developer'' 
- ''DOM Inspector'' 
- ''Inspect This'' 
- ''Formfox'' 
- ''Exploit Me'' 
- ''Cookies'' 

+'''Proxy''' 

- ''FoxyProxy Standard 2.22.6'' 
- ''HttpFox'' ''

OWASP Mantra - Security Framework

2011-07-17T11:14:54Z

Yashartha Chaturvedi:

OWASP Mantra - Security Framework

2011-07-17T10:15:07Z

Yashartha Chaturvedi:

OWASP Mantra - Security Framework

2011-07-17T10:13:52Z

Yashartha Chaturvedi: