OWASP Code Kids 2015 Ideas - Revision history

Seccoale: Seccoale moved page GCI2014 Ideas to OWASP Code Kids 2015 Ideas: It is no more a Google Code In

2015-02-19T08:40:27Z

Seccoale moved page GCI2014 Ideas to OWASP Code Kids 2015 Ideas: It is no more a Google Code In

Nilay Sangani at 17:48, 11 November 2014

2014-11-11T17:48:55Z

Fabio.e.cerullo at 09:25, 10 November 2014

2014-11-10T09:25:29Z

Larry Conklin at 16:43, 9 November 2014

2014-11-09T16:43:19Z

Abdelhadi AZOUNI: /* OWASP ZAP */

2014-11-09T14:20:33Z

‎OWASP ZAP

Abdelhadi AZOUNI: /* OWASP ZAP Task 1 */

2014-11-09T14:14:01Z

‎OWASP ZAP Task 1

Abdelhadi AZOUNI: /* OWASP ZAP Task 1 */

2014-11-09T14:13:05Z

‎OWASP ZAP Task 1

Abdelhadi AZOUNI: /* OWASP ZAP Task 1 */

2014-11-09T14:12:12Z

‎OWASP ZAP Task 1

A V Minhaz: /* Task 3: Porting CSRF Protector PHP Wiki (from Github) to OWASP Wiki */

2014-11-08T08:32:23Z

‎Task 3: Porting CSRF Protector PHP Wiki (from Github) to OWASP Wiki

A V Minhaz: /* Task 4: Porting mod_csrfprotector Wiki (from Github) to OWASP Wiki */

2014-11-08T08:32:07Z

‎Task 4: Porting mod_csrfprotector Wiki (from Github) to OWASP Wiki

← Older revision		Revision as of 17:48, 11 November 2014
Line 459:		Line 459:

	'''Mentors:''' Larry Conklin, Gary Robinson		'''Mentors:''' Larry Conklin, Gary Robinson
		+
		+	== OWASP Security Controls in Web Application Development Lifecycle ==
		+	https://www.owasp.org/index.php/OWASP_Security_Controls_in_Web_Application_Development_Lifecycle
		+
		+	=== Task 1: Web Application Architecture ===
		+
		+	'''Brief Explanation:'''
		+
		+	To come out with a diagrammatic explanation of how a web application works. Each and every section in the diagram must be explained.
		+
		+	'''Task Category:'''
		+
		+	Architecture
		+
		+	'''Expected Results:'''
		+
		+	The architecture must clearly explain how a web application works irrespective of any technology.
		+
		+	'''Knowledge Prerequisites:'''
		+
		+	Good understanding of web applications
		+
		+	=== Task 2: Project Logo ===
		+
		+	'''Brief Explanation:'''
		+
		+	To come out with a suitable logo for the project matching the project title
		+
		+	'''Task Category:'''
		+
		+	Designing Logo
		+
		+	'''Expected Results:'''
		+
		+	Project Logo
		+
		+	'''Knowledge Prerequisites:'''
		+
		+	Creative imagination
		+
		+	=== Task 3: Secure web application coding ===
		+
		+	'''Brief Explanation:'''
		+
		+	How to code a web application securely? E.g: Session Management, Input Validation, Error Logging, Configuration etc. with code examples. Technology : .NET / Java
		+
		+	'''Task Category:'''
		+
		+	Research & code snippets
		+
		+	'''Expected Results:'''
		+	Theory and Code
		+
		+	'''Knowledge Prerequisites:'''
		+
		+	Good research skills, proper understanding of coding in .NET and Java
		+
		+	'''Mentor:''' Nilay Sangani

← Older revision		Revision as of 09:25, 10 November 2014
Line 55:		Line 55:

	'''Mentors:''' Abdelhadi		'''Mentors:''' Abdelhadi
		+
		+	=== OWASP ZAP Task 3 ===
		+
		+	'''Brief description:'''
		+
		+	In this task you are required to reproduce vulnerabilities in OWASP web goat using Owasp ZAP and zest scripts. The chosen challenge must be solved using ZAP and the resolution must be stored as a zest script. This task should help documenting of web goat and providing some working examples of Mozilla Zest scripts.
		+
		+	'''Task Category:'''
		+
		+	Code
		+
		+	'''Expected Results:'''
		+
		+	Zest scripts which reproduces some of the vulnerabilities challange of Owasp WebGoat.
		+
		+	'''Knowledge Prerequisites:'''
		+
		+	Comfortable in Javascript and HTML. Good understanding of Application Security and related vulnerabilities.
		+
		+	'''Mentors:''' Alessandro Secco

	== OWASP OWTF ==		== OWASP OWTF ==

← Older revision		Revision as of 16:43, 9 November 2014
Line 372:		Line 372:

	'''Mentors:''' Minhaz		'''Mentors:''' Minhaz
		+
		+	== OWASP Code Review Project ==
		+	https://www.owasp.org/index.php/OWASP_Code_review_V2_Project
		+
		+	=== Task 1: Code Samples ===
		+
		+	'''Brief Explanation:'''
		+
		+	Code review guide has example code in .Net and Java and in some cases C++. We also want to include sample code in PHP and Ruby. We have existing example code in Java, .Net c#.
		+
		+	'''Task Category:'''
		+
		+	Code
		+
		+	'''Expected Results:'''
		+
		+	Follow existing code samples we need you to create Ruby and PHP where needed. All work will be shown in code review guide wiki. Please review code samples in code review guide wiki.
		+
		+	'''Knowledge Prerequisites:'''
		+
		+	php, and or Ruby
		+
		+	'''Mentors:''' Larry Conklin, Gary Robinson
		+
		+	=== Task 1.1: Code Samples ===
		+	Session Handling. Need php and Java code examples
		+	https://www.owasp.org/index.php/CRV2_SessionHandling
		+
		+	=== Task 1.2: Code Samples ===
		+	Input validation. Need php code examples
		+	https://www.owasp.org/index.php/CRV2_InputValIntro
		+
		+	=== Task 1.3: Code Samples ===
		+	Handling Error Messages. Need pho code examples
		+	https://www.owasp.org/index.php/CRV2_ErrorHandlingMessages
		+
		+	=== Task 1.4: Code Samples ===
		+	Persistent – The Anti pattern. Need Ruby code examples.
		+	https://www.owasp.org/index.php/CRV2_RevCodePersistentAntiPatternRuby
		+
		+	=== Task 1.5: Code Samples ===
		+	Reflected - The Anti pattern. Need Ruby code examples.
		+	https://www.owasp.org/index.php/CRV2_RevCodeReflectedAntiPatternIRuby
		+
		+	=== Task 1.6: Code Samples ===
		+	Ruby - AntiPatttern
		+	https://www.owasp.org/index.php/CRV2_AntiPatternPHP
		+
		+	=== Task 2: Documentation ===
		+	Reviewing by Technical Control
		+	https://www.owasp.org/index.php/OWASP_Code_review_V2_Table_of_Contents#Reviewing_by_Technical_Control
		+
		+	Reviewing by Vulnerability
		+	https://www.owasp.org/index.php/OWASP_Code_review_V2_Table_of_Contents#Reviewing_by_Vulnerability
		+	We need content from last two sections pulled from the wiki and added to a word doc and if possible have the content put into the following word doc template. Email me and I will send you the word template.
		+
		+	We realize that all of the content will not easily fit into the word template but they can do the best they can and that will be fine with us. We only have three rules.
		+
		+	Don’t delete anything even if you don’t agree with it.
		+	Don’t add anything unless it is well marked that you added it.
		+	Have fun and please ask questions. Please remember we have full time jobs and families. We will answer questions but maybe not as quickly as you would like. Yea, we are old grouchy men.
		+
		+	'''Knowledge Prerequisites:'''
		+
		+	Basic understanding wiki editing, word understanding and ability to format text.
		+
		+	'''Mentors:''' Larry Conklin, Gary Robinson

← Older revision		Revision as of 14:20, 9 November 2014
Line 32:		Line 32:

	Good understanding of web security basics, Knowledge on how do CMSs work and good writing skills.		Good understanding of web security basics, Knowledge on how do CMSs work and good writing skills.
		+
		+	'''Mentors:''' Abdelhadi
		+
		+
		+	=== OWASP ZAP Task 2 ===
		+
		+	'''Brief description:'''
		+
		+	Rebuild the CMSscanner GUI including a progress bar that shows scanning progress and a textzone to display tried strings and paths used by the scanner in real time
		+
		+	'''Task Category:'''
		+
		+	Code/Design
		+
		+	'''Expected Results:'''
		+
		+	New GUI with progress bar and displaying paths when scanning
		+
		+	'''Knowledge Prerequisites:'''
		+
		+	Java language, GUI design.

	'''Mentors:''' Abdelhadi		'''Mentors:''' Abdelhadi

@@ Line 17: / Line 17: @@
 === OWASP ZAP Task 1 ===
-'''Task description:'''
+'''Brief description:'''
 Write a blogpost about CMS-scnanning techniques, this will include web-apps fingerprinting methods, vulnerability checking using on-line databases and a survey of existing tools.

← Older revision	Revision as of 08:40, 19 February 2015
(No difference)

@@ Line 17: / Line 17: @@
 === OWASP ZAP Task 1 ===
-'''Brief Explanation:'''
+Write a blogpost about CMS-scnanning techniques, this will include web-apps fingerprinting methods, vulnerability checking using on-line databases and a survey of existing tools.
 Task description
@@ Line 23: / Line 23: @@
 '''Task Category:'''
-Eg. Code Category
+Documentation
 '''Expected Results:'''
-Describe the expected results of the task
+A professional blogpost that will be published on OWASP website
 '''Knowledge Prerequisites:'''
-Comfortable in PHP, HTML and possibly Javascript. Good understanding of Application Security and related vulnerabilities.
+Good understanding of web security basics, Knowledge on how do CMSs work and good writing skills.
-'''Mentors:''' XXXXXX
+'''Mentors:''' Abdelhadi
 == OWASP OWTF ==

@@ Line 301: / Line 301: @@
 Familiarity with wiki.
 '''Reference'''
 [https://github.com/mebjas/CSRF-Protector-PHP/wiki Github wiki for CSRF Protector php]
 '''Mentors:''' Minhaz

@@ Line 322: / Line 322: @@
 Familiarity with wiki.
-'''References''''
 [https://github.com/mebjas/mod_csrfprotector/wiki Github wiki for mod_csrfprotector]