Category:OWASP LAPSE Project - Revision history

Paulo Coimbra: Redirected page to OWASP LAPSE Project

2011-03-02T15:35:56Z

Redirected page to OWASP LAPSE Project

Paulo Coimbra: Replaced content with "#REDIRECT [:OWASP LAPSE Project]]"

2011-03-02T15:35:46Z

Replaced content with "#REDIRECT [:OWASP LAPSE Project]]"

Paulo Coimbra at 15:32, 2 March 2011

2011-03-02T15:32:34Z

Dinis.cruz at 15:25, 6 October 2009

2009-10-06T15:25:16Z

Paulo Coimbra at 14:20, 24 August 2009

2009-08-24T14:20:09Z

Paulo Coimbra at 18:13, 3 July 2009

2009-07-03T18:13:29Z

Wichers: /* Overview */

2007-05-10T23:49:03Z

‎Overview

Wichers at 21:05, 13 November 2006

2006-11-13T21:05:14Z

OWASP at 15:46, 29 October 2006

2006-10-29T15:46:57Z

Esheridan at 17:26, 19 September 2006

2006-09-19T17:26:00Z

← Older revision		Revision as of 15:35, 2 March 2011
Line 1:		Line 1:
−	#REDIRECT [:OWASP LAPSE Project]]	+	#REDIRECT [[:OWASP LAPSE Project]]

← Older revision		Revision as of 15:35, 2 March 2011
Line 1:		Line 1:
−	~~==== Main ====~~	+	#REDIRECT [:OWASP LAPSE Project]]
−
−	~~'''LAPSE: Web Application Security Scanner for Java'''~~
−	~~== News ==~~
−	* 8/23/2006 - version 2.5.5 released (see http://suif.stanford.edu/~livshits/work/lapse/download.html)
−	* 8/22//2006 - OWASP LAPSE Project Created
−
−	~~== Overview ==~~
−
−	LAPSE stands for a <u>L</u>ightweight <u>A</u>nalysis for <u>P</u>rogram <u>S</u>ecurity in <u>E</u>clipse. LAPSE is designed to help with the task of auditing <b>Java J2EE</b> applications for common types of security vulnerabilities found in Web applications. LAPSE was developed by [http://suif.stanford.edu/~livshits/ Benjamin Livshits] as part of the [http://suif.stanford.edu/~livshits/work/griffin/ Griffin Software Security Project].
−
−	[~~[Image~~:~~screenshot.jpg\|thumb\|300px\|right\|LAPSE in action (click to see a bigger image)]]~~
−	~~LAPSE targets the following Web application vulnerabilities:~~
−
−	* Parameter manipulation * SQL injections
−	* Header manipulation * Cross-site scripting
−	* Cookie poisoning * HTTP splitting
−	* Command-line parameters * Path traversal
−
−	What should you do to avoid these vulnerabilities in your code? How do we protect Web applications from exploits? The proper way to deal with these types of attacks is by sanitizing the tainted input. Please refer to the OWASP ~~guide to find out more about Web application security.~~
−
−	~~If you are interested in auditing a Java Web application, LAPSE helps you in the following ways:~~
−
−	* Identify taint sources
−	* Identify taint sinks
−	* Find paths between sources and sinks
−
−	LAPSE is inspired by existing lightweight security auditing tools such as [http://www.securesw.com/rats RATS], [http://www.striker.ottawa.on.ca/~aland/pscan/ pscan], and [http://www.dwheeler.com/flawfinder/ FlawFinder]. Unlike those tools, however, LAPSE addresses vulnerabilities in Web applications. LAPSE is not intended as a comprehensive solution for Web application security, but rather as an aid in the code review process. Those looking for more comprehensive tools are encouraged to look at some of the tools produced by Fortify or Ounce Labs.
−
−	~~For now, LAPSE is housed at http://suif.stanford.edu/~livshits/work/lapse/~~
−
−	~~== Contributors ==~~
−	* [http://suif.stanford.edu/~livshits/ Benjamin Livshits]
−
−	~~== Feedback and Participation: ==~~
−
−	We hope you find the OWASP LAPSE Project useful. Please contribute to the Project by volunteering for one of the Tasks, sending your comments, questions, and suggestions to owasp@owasp.org. To join the OWASP LAPSE Project mailing list or view the archives, please visit the [http://lists.owasp.org/mailman/listinfo/owasp-lapses subscription page.]
−
−	~~==== Project Details ====~~
−	~~{{:GPC Project Details/OWASP LAPSE Project \| OWASP Project Identification Tab}}~~
−
−	~~[[Category:OWASP Project\|~~LAPSE Project]]
−	~~[[Category:OWASP Download]]~~
−	~~[[Category:OWASP Tool]]~~
−
−
−
−
−	~~__NOTOC__ <headertabs />~~

← Older revision		Revision as of 15:32, 2 March 2011
Line 1:		Line 1:
−	~~{{:Template:Orphaned Projects}}~~
−
−
	==== Main ====		==== Main ====

@@ Line 40: / Line 40: @@
 We hope you find the OWASP LAPSE Project useful. Please contribute to the Project by volunteering for one of the Tasks, sending your comments, questions, and suggestions to owasp@owasp.org.  To join the OWASP LAPSE Project mailing list or view the archives, please visit the [http://lists.owasp.org/mailman/listinfo/owasp-lapses subscription page.]
-==== Project Identification ====
+==== Project Details ====
 [[Category:OWASP Project|LAPSE Project]]
@@ Line 46: / Line 47: @@
 [[Category:OWASP Tool]]
-{{Template:OWASP Project Identification Tab
-| project_name = OWASP LAPSE Project
-| project_description =
 __NOTOC__ <headertabs />

@@ Line 1: / Line 1: @@
 {{:Template:Orphaned Projects}}
 '''LAPSE: Web Application Security Scanner for Java'''
@@ Line 36: / Line 39: @@
 We hope you find the OWASP LAPSE Project useful. Please contribute to the Project by volunteering for one of the Tasks, sending your comments, questions, and suggestions to owasp@owasp.org.  To join the OWASP LAPSE Project mailing list or view the archives, please visit the [http://lists.owasp.org/mailman/listinfo/owasp-lapses subscription page.]
 [[Category:OWASP Project|LAPSE Project]]
@@ Line 41: / Line 46: @@
 [[Category:OWASP Tool]]
-__NOTOC__
+{{Template:OWASP Project Identification Tab

@@ Line 24: / Line 24: @@
 * Find paths between sources and sinks
-LAPSE is inspired by existing lightweight security auditing tools such as [http://www.securesw.com/rats RATS], [http://www.striker.ottawa.on.ca/~aland/pscan/ pscan], and [http://www.dwheeler.com/flawfinder/ FlawFinder]. Unlike those tools, however, LAPSE addresses vulnerabilities in Web applications. LAPSE is not intended as a comprehensive solution for Web application security, but rather as an aid in the code review process. Those looking for more comprehensive tools are encouraged to look at some of the tools produced by Fortify or Secure Software.
+LAPSE is inspired by existing lightweight security auditing tools such as [http://www.securesw.com/rats RATS], [http://www.striker.ottawa.on.ca/~aland/pscan/ pscan], and [http://www.dwheeler.com/flawfinder/ FlawFinder]. Unlike those tools, however, LAPSE addresses vulnerabilities in Web applications. LAPSE is not intended as a comprehensive solution for Web application security, but rather as an aid in the code review process. Those looking for more comprehensive tools are encouraged to look at some of the tools produced by Fortify or Ounce Labs.
 For now, LAPSE is housed at http://suif.stanford.edu/~livshits/work/lapse/

← Older revision		Revision as of 15:46, 29 October 2006
Line 34:		Line 34:

	We hope you find the OWASP LAPSE Project useful. Please contribute to the Project by volunteering for one of the Tasks, sending your comments, questions, and suggestions to owasp@owasp.org. To join the OWASP LAPSE Project mailing list or view the archives, please visit the [http://lists.owasp.org/mailman/listinfo/owasp-lapses subscription page.]		We hope you find the OWASP LAPSE Project useful. Please contribute to the Project by volunteering for one of the Tasks, sending your comments, questions, and suggestions to owasp@owasp.org. To join the OWASP LAPSE Project mailing list or view the archives, please visit the [http://lists.owasp.org/mailman/listinfo/owasp-lapses subscription page.]
		+
		+	[[Category:OWASP Tool]]
		+	[[Category:OWASP Download]]

← Older revision		Revision as of 17:26, 19 September 2006
Line 30:		Line 30:
	== Contributors ==		== Contributors ==
	* [http://suif.stanford.edu/~livshits/ Benjamin Livshits]		* [http://suif.stanford.edu/~livshits/ Benjamin Livshits]
		+
		+	== Feedback and Participation: ==
		+
		+	We hope you find the OWASP LAPSE Project useful. Please contribute to the Project by volunteering for one of the Tasks, sending your comments, questions, and suggestions to owasp@owasp.org. To join the OWASP LAPSE Project mailing list or view the archives, please visit the [http://lists.owasp.org/mailman/listinfo/owasp-lapses subscription page.]