GSoC2013 Ideas/OWASP ZAP SAML Support - Revision history

Pulasthi Mahawithana: updated the weekly progress

2013-09-20T19:39:26Z

updated the weekly progress

2013-09-05T19:10:01Z

updated with weekly progress

2013-08-25T15:28:35Z

Updated weekly progress

2013-08-13T10:51:11Z

added link to 0.2-alpha release

2013-08-10T10:45:27Z

updated weekly progress

2013-07-29T19:15:03Z

added weekly progress

2013-07-15T16:08:26Z

updated with week 4

2013-07-10T07:31:56Z

Added week 3 progress

2013-07-02T06:03:50Z

removed team as an heading

2013-07-02T06:02:31Z

Updated code repository, and removed duplicate content from proposal

@@ Line 25: / Line 25: @@
 * [https://github.com/pulasthi7/zap-saml-extension/releases/tag/0.1a 0.1-alpha] Jul 29, 2013
 * [https://github.com/pulasthi7/zap-saml-extension/releases/tag/0.2a 0.2-alpha] Aug 12, 2013
@@ Line 189: / Line 190: @@
 * Update XSW attack ability to new architecture
 * Add support to change relay state parameter

← Older revision		Revision as of 19:10, 5 September 2013
Line 173:		Line 173:
	* Add support to change relay state parameter		* Add support to change relay state parameter
	* Start on testing the extension		* Start on testing the extension
		+
		+
		+
		+	=== Week 11 (26th August - 01st September) ===
		+
		+
		+	==== Week's progress ====
		+	* Changed the extension to use JAXP and XPath to change the attribute values (Removing OpenSAML dependency)
		+	* Combined the extension configurations to save to/ load from a single xml file.
		+	* Introduced type validation to attributes when changing their values. (i.e. String, Integer, TimeStamp...)
		+	* Started on unit and integration testing
		+
		+	==== Plans for next week ====
		+	* Write unit tests and integration tests
		+	* Update XSW attack ability to new architecture
		+	* Add support to change relay state parameter

← Older revision		Revision as of 15:28, 25 August 2013
Line 133:		Line 133:
	* Implement passive SAML request scanner to edit the requests		* Implement passive SAML request scanner to edit the requests
	* Add the ability to save/load the configurations		* Add the ability to save/load the configurations
		+
		+
		+	=== Week 8 (05th August - 11th August) ===
		+
		+
		+	==== Week's progress ====
		+	* Implemented predefined automatic attribute changing and sending to endpoint
		+	* Implemented the passive scanner to intercept the SAML messages to edit them
		+	* Added ability to save/load configurations to the files for later user
		+
		+	==== Plans for next week ====
		+	* Bug fixes for the passive scanner component
		+	* Prepare presentation for AppSec EU
		+
		+
		+
		+	=== Week 9 (12th August - 18th August) ===
		+
		+
		+	==== Week's progress ====
		+	* Prepared presentation for AppSec EU
		+	* Some bug fixing for passive scanner component
		+
		+	==== Plans for next week ====
		+	* Start working on the XSW attack implementation
		+	* Add support to change relay state parameter
		+
		+
		+
		+	=== Week 10 (19th August - 25th August) ===
		+
		+
		+	==== Week's progress ====
		+	* Research on XSW attacks
		+	* Testing the SPs against signature exclutions
		+
		+	==== Plans for next week ====
		+	* Implement and integrate XSW attack ability to extension
		+	* Add support to change relay state parameter
		+	* Start on testing the extension

← Older revision		Revision as of 10:51, 13 August 2013
Line 23:		Line 23:
	=== Pre-Releases ===		=== Pre-Releases ===

−	* [https://github.com/pulasthi7/zap-saml-extension/releases/tag/0.1a 0.1-alpha]	+	* [https://github.com/pulasthi7/zap-saml-extension/releases/tag/0.1a 0.1-alpha] Jul 29, 2013
		+	* [https://github.com/pulasthi7/zap-saml-extension/releases/tag/0.2a 0.2-alpha] Aug 12, 2013

← Older revision		Revision as of 10:45, 10 August 2013
Line 120:		Line 120:
	* Implement automatic attribute changing and resending		* Implement automatic attribute changing and resending
	* Implement UI to set the automatic attribute changer settings		* Implement UI to set the automatic attribute changer settings
		+
		+
		+	=== Week 7 (29nd July - 04th August) ===
		+
		+
		+	==== Week's progress ====
		+	* Implemented the UIs for automatic attribute changer settings
		+
		+	==== Plans for next week ====
		+	* Implement automatic attribute changing and resending
		+	* Implement passive SAML request scanner to edit the requests
		+	* Add the ability to save/load the configurations

@@ Line 20: / Line 20: @@
 Development will be done in an [https://github.com/pulasthi7/zap-saml-extension external code repository] hosted at GitHub.
@@ Line 85: / Line 89: @@
 * Finish the passive request resender
 * Start the implementation of active request editor/resender.

@@ Line 71: / Line 71: @@
 ==== Plans for next week ====
-* Implement Resend abitity to the resender
+* Implement Resend ability to the resender
 * Parse and show the SAML parameters one by one and provide the ability to change parameters independently (Easier way than changing the whole message)

← Older revision		Revision as of 07:31, 10 July 2013
Line 60:		Line 60:
	* Design the UI for the extension		* Design the UI for the extension
	* Provide ability to view SAML messages in a GUI in readable XML format		* Provide ability to view SAML messages in a GUI in readable XML format
		+
		+
		+	=== Week 3 (1st July - 7th July) ===
		+
		+
		+	==== Week's progress ====
		+	* Created an UI for resending Requests
		+	* Added a hook to show the Extension Resender UI
		+	* Added the ability to show the parameters and decoded SAML request in the resender UI
		+
		+	==== Plans for next week ====
		+	* Implement Resend abitity to the resender
		+	* Parse and show the SAML parameters one by one and provide the ability to change parameters independently (Easier way than changing the whole message)

← Older revision		Revision as of 06:03, 2 July 2013
Line 1:		Line 1:

−	~~== Team ==~~
	'''Student''' : Pulasthi Mahawithana <br>		'''Student''' : Pulasthi Mahawithana <br>
	'''Mentors''' : Prasad Shenoy, Kevin Wall <br>		'''Mentors''' : Prasad Shenoy, Kevin Wall <br>

@@ Line 1: / Line 1: @@
 == Introduction ==
@@ Line 9: / Line 13: @@
-== Project Goals, Scope and Deliverables ==
+== Project Goals, Scope and Deliverables, Implementation Plan ==
+Please refer the [http://www.google-melange.com/gsoc/proposal/review/google/gsoc2013/pulasthi7/19001 GSoC proposal] for the project idea.
-The SAML message with fuzzed attributes will be prepared as follows,
+== Project Code, Documentation ==
-* HTTP Redirect – The SAML message will be rebuilt. Then it will be deflated and base64 encoded and will be added as a URL-encoded parameter value
+Development will be done in an [https://github.com/pulasthi7/zap-saml-extension external code repository] hosted at GitHub.