OWASP Security Shepherd - Revision history

SebastienGioria: reflect the download link to include latest releases

2018-10-15T12:00:20Z

reflect the download link to include latest releases

Mark Denihan: /* Setup Help */ Updated

2018-10-11T15:03:27Z

‎Setup Help: Updated

Mark Denihan: /* Classifications */ Adding Axway to Sponsors List

2018-10-11T14:13:19Z

‎Classifications: Adding Axway to Sponsors List

John dileo: Reworded a few bullets, to address significant grammatical issues, which were pointed out to me by a colleague.

2018-08-29T23:51:11Z

Reworded a few bullets, to address significant grammatical issues, which were pointed out to me by a colleague.

Mark Denihan: /* FAQs */

2017-01-24T11:11:42Z

‎FAQs

Mark Denihan at 09:18, 10 January 2017

2017-01-10T09:18:38Z

Mark Denihan at 09:16, 10 January 2017

2017-01-10T09:16:05Z

Mark Denihan: Adding Flagship Status from successful graduation review: https://docs.google.com/document/d/1AZZ_GZR0-uF1qBZDQdgdV49IyEZYT_91qQMHRGszDLw/edit

2017-01-10T09:03:35Z

Adding Flagship Status from successful graduation review: https://docs.google.com/document/d/1AZZ_GZR0-uF1qBZDQdgdV49IyEZYT_91qQMHRGszDLw/edit

Mark Denihan: Replacing Download Links to GitHub Release Page

2015-10-24T13:27:36Z

Replacing Download Links to GitHub Release Page

Mark Denihan: /* Setup Help */ Updating to V3

2015-10-23T17:30:47Z

‎Setup Help: Updating to V3

@@ Line 104: / Line 104: @@
 == Download ==
-* [https://github.com/OWASP/SecurityShepherd/releases/tag/v3.0 OWASP Security Shepherd GitHub Downloads]
+* [https://github.com/OWASP/SecurityShepherd/releases OWASP Security Shepherd GitHub Downloads]
 == Presentation ==

@@ Line 192: / Line 192: @@
 =Setup Help=
-===Security Shepherd v3.0 VM Setup:===
+Use our [https://github.com/OWASP/SecurityShepherd/wiki Github Wiki page] for the best Setup Help going!
 =Videos=

@@ Line 2: / Line 2: @@
 <div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:flagship_big.jpg|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Flagship_Projects]]</div>
 {| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
-| valign="top"  style="border-right: 1px dotted gray;padding-right:25px;" |
+| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |
 ==OWASP Security Shepherd==
@@ Line 52: / Line 52: @@
 Our long term goals are to cover as many web and mobile application security risks as possible. If you are interested in getting involved in adding levels to Security Shepherd, please check out our [http://bit.ly/securityShepherdGithub GitHub] Wiki describing [https://github.com/OWASP/SecurityShepherd/wiki/Adding-a-new-Language-to-Shepherd How to Make a Security Shepherd Level]. For the Latest and Greatest short term goals. Please see the [https://github.com/OWASP/SecurityShepherd/issues issues page in our GitHub].
-| valign="top"  style="padding-left:25px;width:350px;border-right: 1px dotted gray;padding-right:25px;" |
+| valign="top" style="padding-left:25px;width:350px;border-right: 1px dotted gray;padding-right:25px;" |
 == What is Security Shepherd? ==
@@ Line 100: / Line 100: @@
 When Shepherd has been deployed in the Tournament Mode, a user can access any level that is marked as open by the admin. Modules are sorted into difficulty bands, from least to most difficult. This layout is ideal when Shepherd is being utilised as an open application security competition.
 | valign="top" style="padding-left:25px;width:250px;" |
 == Download ==
@@ Line 135: / Line 134: @@
     {| width="200" cellpadding="2"
     |-
-    | align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-flagship-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Flagship_Projects]]
+    | rowspan="2" align="center" valign="top" width="50%" | [[File:Owasp-flagship-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Flagship_Projects]]
-    | align="center" valign="top" width="50%"| [[File:Owasp-breakers-small.png|link=]]
+    | align="center" valign="top" width="50%" | [[File:Owasp-breakers-small.png|link=]]
     |-
-    | align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
+    | align="center" valign="top" width="50%" | [[File:Owasp-builders-small.png|link=]]
     |-
-    | colspan="2" align="center"  | [[File:Project_Type_Files_TOOL.jpg|link=]]
+    | colspan="2" align="center" | [[File:Project_Type_Files_TOOL.jpg|link=]]
     |}
@@ Line 169: / Line 168: @@
 [[File:Manicode-logo.png]]
 ==Contributors==
 OWASP Security Shepherd is developed by a worldwide team of volunteers. The primary contributors to date have been:
@@ Line 306: / Line 307: @@
 __NOTOC__ <headertabs />
-[[Category:OWASP Project]]  [[Category:OWASP_Builders]] [[Category:OWASP_Breakers]]  [[Category:OWASP_Tool]]
+[[Category:OWASP Project]]

@@ Line 20: / Line 20: @@
 == Why use Security Shepherd? ==
-'''Wide Topic Coverage: ''' Shepherd includes over seventy levels across the entire spectrum of Web and Mobile application security under a single project.
+'''Wide Topic Coverage: ''' Shepherd includes more than seventy levels - across the entire spectrum of Web and mobile application security - within a single project.
-'''Gentle Learning Curve: ''' Shepherd is a perfect for users completely new to security with levels increases in difficulty at a pleasant pace.
+'''Gentle Learning Curve: ''' Shepherd is a perfect entry point for users completely new to security, with levels increasing in difficulty at a manageable pace.
-'''Layman Write Ups: ''' Each security concept when first presented in Shepherd, is done so in layman terms so that anyone can beginner can absorb them.
+'''Layman Write Ups: ''' Each security concept, when first addressed in Shepherd, is presented using plain language, so it can be readily understood by beginners.
 '''Real World Examples: ''' The security risks in Shepherd are real vulnerabilities that have had their exploit impact dampened to protect the application, users and environment. There are no simulated security risks which require an expected, specific attack

@@ Line 151: / Line 151: @@
 ; Q Where can I access Security Shepherd?
-: A You can Download it and run it yourself, ask your lecturer to, and we tend to have a public environment available at https://owasp.securityshepherd.eu/ . It operates on a Research Network in ITB's Security Research Lab, so it can be in a state of flux.
+: A You can Download it and run it yourself or there are various public instances (eg: [https://community.ctf365.com/t/owasp-security-shepherd/357 CTF365])
 ; Q Where can I download Security Shepherd?

@@ Line 1: / Line 1: @@
 =Main=
 <div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>
-<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:Lab_big.jpg|link=]]</div>
+<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:flagship_big.jpg|link=]]</div>
 {| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
 | valign="top"  style="border-right: 1px dotted gray;padding-right:25px;" |
@@ Line 121: / Line 121: @@
 == Recent News and Events ==
-* [October 2015] Shepherd v3.0 Released
+* [January 2017] Shepherd Graduates to Flagship
 == Related Projects ==
@@ Line 141: / Line 136: @@
     {| width="200" cellpadding="2"
     |-
-    | align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-labs-trans-85.png|100px|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Lab_Projects]]
+    | align="center" valign="top" width="50%" rowspan="2"| [[File:Owasp-flagship-trans-85.png|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Flagship_Projects]]
     | align="center" valign="top" width="50%"| [[File:Owasp-breakers-small.png|link=]]
     |-

@@ Line 106: / Line 106: @@
 == Download ==
-* [https://sourceforge.net/projects/owaspshepherd/files/ OWASP Security Shepherd SourceForge]
+* [https://github.com/OWASP/SecurityShepherd/releases/tag/v3.0 OWASP Security Shepherd GitHub Downloads]
 == Presentation ==
@@ Line 160: / Line 160: @@
 ; Q Where can I download Security Shepherd?
-: A You can download it on [[https://sourceforge.net/projects/owaspshepherd/files/ Source Forge]]
+: A You can download it from the [[https://github.com/OWASP/SecurityShepherd/releases/tag/v3.0 GitHub Release Page]]
 ; Q How can I run Shepherd on my network safely?

@@ Line 197: / Line 197: @@
 =Setup Help=
-===Security Shepherd v2.4 VM Setup:===
+===Security Shepherd v3.0 VM Setup:===
 To get a Security Shepherd VM ready to rock, follow these steps;
 Setting up your instance of Security Shepherd with the VM: In Steps!
-* Import the VM to your hyper visor (Eg: Virtual Box)
+* Import the VM to your hypervisor (Eg: Virtual Box)
 * Update the VM Network Adapters to suit what you have available. (Bridged Adapter for Network Availability, Host-Only for local access only and NAT for just outbound access) The VM by default has 2 Network adapters, one NAT and a Host-Only.
 * Boot the VM
@@ Line 211: / Line 211: @@
 * Sign in with admin / password
 * Change the admin password (cannot be password again)
-* Go to Admin -> Configuration -> Change Module Layout to change the way levels are presented. Default is CTF Mode (One at a time)
+* Go to Admin -> Module Management-> Change Module Layout to change the way levels are presented. Default is CTF Mode (One at a time)
 * Time to play!
-===How to Upgrade Version 2.3 to Version 2.4:===
+===How to Upgrade Version 2.4 to Version 3.0:===
 You have a current instance of Security Shepherd V2.3, and you want to upgrade it to 2.4 without loosing any data? No Problem. Follow these steps to upgrade;
-* Download and run this SQL file on your DB server: [[https://github.com/OWASP/SecurityShepherd/raw/master/SecurityShepherdCore/setupFiles/updateCoreSchemaV2.4.sql Upgrade Core Schema Script]]
+* Download and run this SQL file on your DB server: [[https://github.com/OWASP/SecurityShepherd/raw/master/SecurityShepherdCore/setupFiles/updateCoreSchemaV2.4toV3.sql Upgrade Core Schema Script]]
-* Download and run this SQL file on your DB server: [[https://github.com/OWASP/SecurityShepherd/raw/master/SecurityShepherdCore/setupFiles/updateModuleSchemasV2.4.sql Upgrade Module Schemas Script]]
+* Download the 2.4 Manual Pack, and replace your V2.4 war file with the new V3.0 war file.
-* Download the 2.4 Manual Pack, and replace your V2.3 war file with the new V2.4 war file.
+* Run the moduleSchemas.sql script from the manual pack on your Security Shepherd mysql instance
 All settings will be set to default after completing these steps and new levels will be marked as open.
-===Security Shepherd v2.4 Manual Pack (Windows):===
+===Security Shepherd v3.0 Manual Pack (Windows):===
 * Download the Security Shepherd Manual Pack
 * Install Apache Tomcat 7
@@ Line 284: / Line 285: @@
    <security-constraint><web-resource-collection><web-resource-name>Entire Application</web-resource-name><url-pattern>/*</url-pattern></web-resource-collection><user-data-constraint><transport-guarantee>CONFIDENTIAL</transport-guarantee></user-data-constraint></security-constraint>
-* Time to Play!
+* To setup and install MonogoDB for the NoSQL Injection Level found in shepherd, follow the steps to install here: https://docs.mongodb.org/manual/tutorial/install-mongodb-on-windows/
 =Videos=
 {|