Projects/OWASP Testing Project

PROJECT INFO What does this OWASP project offer you?

RELEASE(S) INFO What releases are available for this project?

what is this project? Name: OWASP Testing Project (home page) Purpose: The OWASP Testing Guide includes a "best practice" penetration testing framework which users can implement in their own organizations and a "low level" penetration testing guide that describes techniques for testing most common web application and web service security issues. License: Creative Commons Attribution Share Alike 3.0 who is working on this project? Project Leader(s): Andrew Muller @ Matteo Meucci @ how can you learn more? Project Pamphlet: Not Yet Created Project Presentation: View Mailing list: Mailing List Archives Project Roadmap: View Main links: Project Contributors (Full List) Testing Guide's (Version 4.0) Approved Budget Key Contacts Contact Andrew Muller @ to contribute to this project Contact Andrew Muller @ to review or sponsor this project

current release Testing Guide V 4.0 - 15th February 2013 The new project is available here - (no download available) Release description: Review all the control numbers to adhere to the OWASP Common numbering, Review all the sections in v3, Create a more readable guide, eliminating some sections that are not really useful, Insert new testing techniques: HTTP Verb tampering, HTTP Parameter Pollutions, etc., Rationalize some sections as Session Management Testing, Create a new section: Client side security and Firefox extensions testing. Rating: Not Reviewed - Assessment Details last reviewed release Testing Guide V 3.0 - December 2008 - (download) Release description: The OWASP Testing Guide v3 is a 349 page book; we have split the set of active tests in 9 sub-categories for a total of 66 controls to test during the Web Application Testing activity. Rating: Stable Release - Assessment Details other releases Testing Guide V 4.0 Testing Guide V 3.0