Johanna Curiel at 23:20, 27 April 2015

2015-04-27T23:20:11Z

Raesene at 14:24, 17 June 2014

2014-06-17T14:24:40Z

Kait Disney-Leugers: /* Email List */

2014-06-11T20:17:11Z

‎Email List

Kait Disney-Leugers: /* Project Leader */

2014-06-11T20:16:30Z

‎Project Leader

Kait Disney-Leugers: Created page with "=Main=
link=
{| style="padding: 0;margin:0;margin-top:10px;t..."

2014-06-11T20:09:58Z

Created page with "=Main= <div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">link=</div> {| style="padding: 0;margin:0;margin-top:10px;t..."

New page

=Main=

<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>

{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |

==OWASP Store Sheep==

OWASP Store Sheep is...

==Introduction==

Store Sheep is a training app for Developers wishing to learn to securely code a Windows Store ('Metro Style') App, and Testers wanting to learn to test one. It contains a number of security vulnerabilities with explanations and fixes for them.

==Description==

Store Sheep (in line with the 'Goat' theme of Web Goat, Rails Goat etc - I thought it was about time we had a Sheep instead) is a training application for developers and testers. It takes the form of a pretend Windows Store App called 'A friend for Ewe' which is a dating agency for owners of pet Sheep.

The purpose of Store Sheep is for developers and testers alike to learn where these apps resemble and differ from traditional Win32 and Web applications and how to build them to resist attack. A side benefit from this project will be for the community to learn more about how the certification process for a big app store works and the kind of problems it does (and doesn't) find. I would imagine this would be relevant not only to Microsoft's Store but to Apple and Google's as well.

Broadly the idea at this stage is to get a basic app and some documentation up and running quite quickly and then to refine it as time goes on.

==Licensing==
OWASP Store Sheep is free to use. It is licensed under the GNU GPL v3 license, so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

| valign="top" style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |

== What is Store Sheep? ==

OWASP Store Sheep provides:

* A Visual Studio project containing a JavaScript/HTML Windows Store app which can be side loaded on to a development machine running Windows 8.1.

== Presentation ==

== Project Leader ==

Marion McCune

== Related Projects ==

== Ohloh ==

| valign="top" style="padding-left:25px;width:200px;" |

== Quick Download ==

== Email List ==

Project Email List

== News and Events ==

== In Print ==

==Classifications==

{| width="200" cellpadding="2"
|-
| align="center" valign="top" width="50%" rowspan="2"| [[File:New projects.png|100px|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
| align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]]
|-
| align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
|-
| colspan="2" align="center" | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
|-
| colspan="2" align="center" | [[File:Project_Type_Files_CODE.jpg|link=]]
|}

|}

=FAQs=

; Q1
: A1

; Q2
: A2

= Acknowledgements =
==Volunteers==
XXX is developed by a worldwide team of volunteers. The primary contributors to date have been:

* xxx
* xxx

==Others==
* xxx
* xxx

= Road Map and Getting Involved =
As of June 2014, the priorities are:

The application in its finished form will have three versions.

# This 'original version' contains a number of critical vulnerabilities, some of which will cause it to fail WACK (Windows Application Certification Kit). As such, if submitted to the Windows Store it would be rejected by Microsoft. The associated documentation explains how to correct these problems and move it to B)
# This application passes WACK and may pass Microsoft's checks, however it still contains a number of vulnerabilities such as authorisation flaws, Web Service problems etc. which would cause it to be a danger to its users' data if put live. The associated documentation explains how to find and fix these problems.
# This 'fixed' version of the application represents a safe (if not tremendously useful!) app which could pass through a Web Application 'penetration' test without any significant findings.

Involvement in the development and promotion of Store Sheep is actively encouraged!
You do not have to be a security expert in order to contribute.
Some of the ways you can help:
* xxx
* xxx

=Project About=
{{:Projects/OWASP_Store_Sheep_Page}}

__NOTOC__ <headertabs />

[[Category:OWASP Project]] [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]] [[Category:OWASP_Document]]

@@ Line 1: / Line 1: @@
 =Main=
-<div style="width:100%;height:160px;border:0,margin:0;overflow: hidden;">[[File:OWASP_Project_Header.jpg|link=]]</div>
+<div style="width:100%;height:105px;border:0,margin:0;overflow: hidden;">[[Image:Low activity.jpg|800px| link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Low_Activity_Projects]] </div>
 {| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-

@@ Line 8: / Line 8: @@
 ==OWASP Store Sheep==
-OWASP Store Sheep is...
+OWASP Store Sheep is a work in progress application do demonstrate security concepts relating to Windows Store Apps.
 ==Introduction==

@@ Line 57: / Line 57: @@
 == Email List ==
-Project Email List
+[https://lists.owasp.org/mailman/listinfo/owasp_store_sheep Sign Up]
 == News and Events ==

@@ Line 42: / Line 42: @@
 == Project Leader ==
-Marion McCune
+[mailto:marion.mccune@owasp.org Marion McCune]
 == Related Projects ==

OWASP Store Sheep Project - Revision history

Johanna Curiel at 23:20, 27 April 2015

Raesene at 14:24, 17 June 2014

Kait Disney-Leugers: /* Email List */

Kait Disney-Leugers: /* Project Leader */

Kait Disney-Leugers: Created page with "=Main= link= {| style="padding: 0;margin:0;margin-top:10px;t..."

Kait Disney-Leugers: Created page with "=Main=
link=
{| style="padding: 0;margin:0;margin-top:10px;t..."