OWASP Security Research and Development Framework - Revision history

Claudia casanovas at 15:29, 12 February 2016

2016-02-12T15:29:00Z

Johanna Curiel at 02:43, 28 January 2016

2016-01-28T02:43:10Z

Johanna Curiel at 02:32, 28 January 2016

2016-01-28T02:32:14Z

Johanna Curiel at 00:38, 3 March 2015

2015-03-03T00:38:44Z

AmrThabet at 14:12, 22 August 2014

2014-08-22T14:12:30Z

AmrThabet at 16:03, 20 August 2014

2014-08-20T16:03:42Z

AmrThabet at 12:01, 20 August 2014

2014-08-20T12:01:25Z

AmrThabet at 12:00, 20 August 2014

2014-08-20T12:00:01Z

Show changes

Kait Disney-Leugers at 01:27, 6 August 2014

2014-08-06T01:27:49Z

Kait Disney-Leugers at 04:32, 27 July 2014

2014-07-27T04:32:50Z

@@ Line 5: / Line 5: @@
 =Main=
-<div style="width:100%;height:100%;border:0;margin:0;overflow: hidden;">[[File:SRDF-Project-Header.jpg|link=]]</div>
+<!-- DO NOT ALTER OR REMOVE THE TEXT ON NEXT LINE -->
-<div style="width:100%;height:90px;border:0,margin:0;overflow: hidden;">[[File:Incubator_big.jpg|link=OWASP_Project_Stages#tab=Incubator_Projects]]</div>
+<div style="width:100%;height:100px;border:0,margin:0;overflow: hidden;">[[Image:OWASP Inactive Banner.jpg|800px| link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Inactive_Projects]] </div>
 {| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-

← Older revision		Revision as of 02:43, 28 January 2016
Line 1:		Line 1:
−	{{taggedDocument}}	+	{{taggedDocument
		+	\| type=pls_review
		+	\| comment=This project seems outdated
		+	}}
	=Main=		=Main=

← Older revision		Revision as of 02:32, 28 January 2016
Line 1:		Line 1:
		+	{{taggedDocument}}
	=Main=		=Main=

← Older revision		Revision as of 00:38, 3 March 2015
Line 2:		Line 2:

	<div style="width:100%;height:100%;border:0;margin:0;overflow: hidden;">[[File:SRDF-Project-Header.jpg\|link=]]</div>		<div style="width:100%;height:100%;border:0;margin:0;overflow: hidden;">[[File:SRDF-Project-Header.jpg\|link=]]</div>
		+	<div style="width:100%;height:90px;border:0,margin:0;overflow: hidden;">[[File:Incubator_big.jpg\|link=OWASP_Project_Stages#tab=Incubator_Projects]]</div>

	{\| style="padding: 0;margin:0;margin-top:10px;text-align:left;" \|-		{\| style="padding: 0;margin:0;margin-top:10px;text-align:left;" \|-

@@ Line 81: / Line 81: @@
 ''' the project development still active and still expanding
 | valign="top"  style="padding-left:25px;width:200px;" |
@@ Line 92: / Line 118: @@
 [http://www.security-framework.com Our Website]
-it's an implementation for SRDF on python and very easy to use like this:
+== Project Leader ==
->>from pySRDF import *
+== Libraries: ==
-OR Using the Emulator:
+It contains two namespaces:
->> emu = Emulator("C:\\test.exe")
+=== Malware: ===
-OR
+This namespace contains the scanning, Hooking and emulation libraries and contains Pokas Emulator wrapper class, Yara wrapper class (wildcard scanner), a debugger and contains a directory recursive scanner and other tools
->> emu.SetBp("__isdirty(eip)") #which set bp on Execute on modified data
+And also, it contains the x86 assembler and disassembler (using Pokas Emulator Assembler) and allow to contain other assemblers and for other platforms.
-Find it at:
+=== Network: ===
-[https://github.com/AmrThabet/pySRDF pySRDF Github]
+This namespace should contain the User-Mode Packet capture and firewall. And should contain the Winpcap Packet capturing and firewall system.
-[https://github.com/AmrThabet/pySRDF/tree/master/Examples Examples]
+== The Core: ==
-|}
+And the core includes the cApp class that contains the back-end database and logging and the User-Interface such as cConsoleApp
 =Project About=

@@ Line 1: / Line 1: @@
 =Main=
-<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>
+<div style="width:100%;height:100%;border:0;margin:0;overflow: hidden;">[[File:SRDF-Project-Header.jpg|link=]]</div>
 {| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
 | valign="top"  style="border-right: 1px dotted gray;padding-right:25px;" |
-==OWASP Security Reseach and Development Framework ==
+== Abstract: ==
 This is a free open source Development Framework created to support writing security tools and malware analysis tools. And to convert the security researches and ideas from the theoretical approach to the practical implementation.
@@ Line 23: / Line 13: @@
-= Introduction: =
+== Introduction: ==
 In the last several years, the malware black market grows widely. The statistics shows that the number of new viruses increased from 300,000 viruses to millions and millions nowadays.
@@ Line 92: / Line 81: @@
 ''' the project development still active and still expanding
 | valign="top"  style="padding-left:25px;width:200px;" |
@@ Line 142: / Line 119: @@
 |}

← Older revision		Revision as of 12:01, 20 August 2014
Line 142:		Line 142:

	\|}		\|}
−	~~= Roadmap: =~~
−
−	~~=== 1. Antivirus: ===~~
−
−	~~a. XRAY Tool~~
−
−	~~b. Heuristics Analysis~~
−
−	~~c. Behavior-based Detection Tools.~~
−
−	~~d. More File Formats and improve what we have like (PDF, apk, …)~~
−
−	~~e. OpenSBI and other Virus Classification File Formats~~
−
−	~~f. Sandboxing Mechanism.~~
−
−	~~i. Using API/ SSDT Hooking~~
−
−	~~ii. Emulation Based on Pokas Emulator.~~
−
−	~~g. Update System with Flexible Mechanism~~
−
−	~~=== 2. Malware Analysis: ===~~
−
−	~~a. Support idb (IDA Pro Database) to read it and use its analysis~~
−
−	~~b. API Hooking (for the same as above)~~
−
−	~~c. Improvement in Pokas Emulator, Assembler and Disassembler~~
−
−	~~d. Recursive Disassembler~~
−
−	~~e. More APIs Emulation in Pokas x86 Emulator~~
−
−	~~f. Support more Instructions (All FPU instructions, All general purpose instructions and support mmx and 3dnow)~~
−
−
−	~~=== 3. Unpackers: ===~~
−
−	~~I’m aiming to create a database for all static unpacking codes for the mostly common unpackers and I hope it could be updated by the community~~
−
−
−	~~=== 4. Integrations: ===~~
−
−	~~a. Integration into IDA Pro Plugin Interface … and in (Debugger Menu)~~
−
−	~~b. OllyDbg Plugin Interface~~
−
−	~~c. Ollyscript Executer on cDebugger~~
−
−	~~d. Metasploit Integeration (in Meterpreter Post Exploitation~~
−
−	~~e. Python, Ruby, Delphi Header files and cTypes for SRDF.dll~~
−
−	~~=== 5. Network: ===~~
−
−	~~a. Proxy Server and Emulated IRC and HTTP Connection (Server emulate the replies to the malware and log the data)~~
−
−	~~b. Improve the HTTP analyzer and file capturing~~
−
−	~~c. Add more protocols like SMTP and FTP~~
−
−	~~=== 6. Others: ===~~
−
−	~~We need more helpful tools and applications based on SRDF~~

← Older revision		Revision as of 01:27, 6 August 2014
Line 1:		Line 1:
−	{\|
−	\|-
−	~~! width="700" align="center" \| <br>~~
−	~~! width="500" align="center" \| <br>~~
−	\|-
−	~~\| align="right" \| [[Image:OWASP Inactive Banner.jpg\|800px\| link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Inactive_Projects]]~~
−	~~\| align="right" \|~~
−
−	\|}
−
	''Do you see writing a security tool in windows is hard?''		''Do you see writing a security tool in windows is hard?''

← Older revision		Revision as of 04:32, 27 July 2014
Line 1:		Line 1:
		+	{\|
		+	\|-
		+	! width="700" align="center" \| <br>
		+	! width="500" align="center" \| <br>
		+	\|-
		+	\| align="right" \| [[Image:OWASP Inactive Banner.jpg\|800px\| link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Inactive_Projects]]
		+	\| align="right" \|
		+
		+	\|}
		+
	''Do you see writing a security tool in windows is hard?''		''Do you see writing a security tool in windows is hard?''