Projects/OWASP Zed Attack Proxy Project/Pages/Talks - Revision history

Rick.mitchell: Remove frequency reference

2017-11-14T01:55:20Z

Remove frequency reference

Psiinon at 09:59, 24 February 2016

2016-02-24T09:59:17Z

Psiinon at 09:20, 27 November 2015

2015-11-27T09:20:51Z

Gmaran23 at 03:54, 27 November 2015

2015-11-27T03:54:56Z

Psiinon at 15:33, 2 May 2015

2015-05-02T15:33:48Z

Psiinon at 12:47, 30 March 2015

2015-03-30T12:47:02Z

Psiinon at 15:50, 19 January 2015

2015-01-19T15:50:41Z

Psiinon at 13:54, 15 December 2014

2014-12-15T13:54:08Z

Psiinon at 17:29, 20 November 2014

2014-11-20T17:29:32Z

Psiinon at 09:00, 29 October 2014

2014-10-29T09:00:43Z

← Older revision		Revision as of 01:55, 14 November 2017
Line 1:		Line 1:
	'''Upcoming Talks/Training:'''		'''Upcoming Talks/Training:'''

−	For details of upcoming ZAP related talks or training please see the latest [https://github.com/zaproxy/zaproxy/wiki/Newsletters ZAP ~~Monthly~~ Newsletter]	+	For details of upcoming ZAP related talks or training please see the latest [https://github.com/zaproxy/zaproxy/wiki/Newsletters ZAP Newsletter]

← Older revision		Revision as of 09:59, 24 February 2016
Line 1:		Line 1:
	'''Upcoming Talks/Training:'''		'''Upcoming Talks/Training:'''

−	~~'''2015 November 28: Bangalore: [http://www.meetup.com/DotNetBLR/events/220224708/: Dot Net Bangalore Q4 meet up]'''~~	+	For details of upcoming ZAP related talks or training please see the latest [https://github.com/zaproxy/zaproxy/wiki/Newsletters ZAP Monthly Newsletter]
−
−	~~Automating Web Application Security Testing with OWASP~~ ZAP ~~DOT NET API by Marudhamaran Gunasekaran~~ [https://~~www.twitter~~.com/~~gmaran23].~~
−	~~Event details and agenda - [https:~~//~~www.facebook.com~~/~~events/466886410149273: facebook] or [http://www.meetup.com/DotNetBLR/events/220224708/: meetup.com~~]

← Older revision		Revision as of 09:20, 27 November 2015
Line 5:		Line 5:
	Automating Web Application Security Testing with OWASP ZAP DOT NET API by Marudhamaran Gunasekaran [https://www.twitter.com/gmaran23].		Automating Web Application Security Testing with OWASP ZAP DOT NET API by Marudhamaran Gunasekaran [https://www.twitter.com/gmaran23].
	Event details and agenda - [https://www.facebook.com/events/466886410149273: facebook] or [http://www.meetup.com/DotNetBLR/events/220224708/: meetup.com]		Event details and agenda - [https://www.facebook.com/events/466886410149273: facebook] or [http://www.meetup.com/DotNetBLR/events/220224708/: meetup.com]
−
−
−	~~'''2015 May 20: Amsterdam: [https://www.owasp.org/index.php/ZAP_Summit_2015: First ZAP Summit]'''~~
−
−	~~The very first official ZAP Summit will be taking place in Amsterdam as part of [http://2015.appsec.eu/ AppSec EU].~~
−
−
−	~~'''2015 May 21: Amsterdam: [http://2015.appsec.eu/keynotes/#keynote2: Simon Bennetts: OWASP ZAP - More Advanced Features]'''~~
−
−	In this talk Simon will give a quick introduction to ZAP and then talk about some of the latest changes that have been made, including features that will not have been presented at any other conference.

← Older revision		Revision as of 03:54, 27 November 2015
Line 1:		Line 1:
	'''Upcoming Talks/Training:'''		'''Upcoming Talks/Training:'''
		+
		+	'''2015 November 28: Bangalore: [http://www.meetup.com/DotNetBLR/events/220224708/: Dot Net Bangalore Q4 meet up]'''
		+
		+	Automating Web Application Security Testing with OWASP ZAP DOT NET API by Marudhamaran Gunasekaran [https://www.twitter.com/gmaran23].
		+	Event details and agenda - [https://www.facebook.com/events/466886410149273: facebook] or [http://www.meetup.com/DotNetBLR/events/220224708/: meetup.com]

@@ Line 2: / Line 2: @@
-'''2015 March 4: Tunisia / Africa: [http://hackzone.csi-ensi.tn/ Zack Syn: OWASP ZAP Workshop]'''
+'''2015 May 20: Amsterdam: [https://www.owasp.org/index.php/ZAP_Summit_2015: First ZAP Summit]'''
-Owasp Zed Attack Proxy: Zap, est un projet phare de l’organisation OWASP. Ce scanner de vulnérabilité a été imaginé pour s’adapter à votre contexte professionnel, que vous soyez auditeur, testeur fonctionnel ou développeur, Zap vous assistera pour automatiser vos scans et répondra aux particularités de votre application.
+The very first official ZAP Summit will be taking place in Amsterdam as part of [http://2015.appsec.eu/ AppSec EU].
-Hack Zone : The Hack Zone event is a scientific event which deals with computer security and encloses the theoretical to the practical in order to meet the knowledge and good security practices in the IT world.
+'''2015 May 21: Amsterdam: [http://2015.appsec.eu/keynotes/#keynote2: Simon Bennetts: OWASP ZAP - More Advanced Features]'''
-Twitter: https://twitter.com/csi_ensi
+In this talk Simon will give a quick introduction to ZAP and then talk about some of the latest changes that have been made, including features that will not have been presented at any other conference.

@@ Line 2: / Line 2: @@
-'''2015 February 21: Bangalore, India: [http://www.meetup.com/DotNetBLR/events/219455183/ Marudhamaran Gunasekaran: Practical Security Testing for Developers using OWASP ZAP]'''
+'''2015 March 4: Tunisia / Africa: [http://hackzone.csi-ensi.tn/ Zack Syn: OWASP ZAP Workshop]'''
-Every time an application faces the world wide web, it inherently becomes vulnerable to attacks. The attackers could be script kiddies, joyriders, turning from hobbyists to downright hostile. The earlier in the development cycle you find the vulnerabilities, the better they are to fix and test.
+Owasp Zed Attack Proxy: Zap, est un projet phare de l’organisation OWASP. Ce scanner de vulnérabilité a été imaginé pour s’adapter à votre contexte professionnel, que vous soyez auditeur, testeur fonctionnel ou développeur, Zap vous assistera pour automatiser vos scans et répondra aux particularités de votre application.
-OWASP ZAP is a free and open source penetration testing tool for finding vulnerabilities in web applications; widely used by security professionals, it is also ideal for anyone new to web application security and includes features specifically aimed at developers.
+La session se divise en deux parties, un fast talk et un workshop pour explorer les features avec un focus sur les celles apportées par la prochaine release.
-This session shows/demonstrates some attacks against web applications and how OWASP ZAP could be used to find those vulnerabilities, both manually and by automated builds.
+Hack Zone : The Hack Zone event is a scientific event which deals with computer security and encloses the theoretical to the practical in order to meet the knowledge and good security practices in the IT world.
-For more information see http://meetup.com/DotNetBLR and https://www.facebook.com/groups/dotnetbangalore/
+Twitter: https://twitter.com/csi_ensi

@@ Line 2: / Line 2: @@
-'''2014 November 22: Null, Bangalore: [http://swachalit.null.co.in/event_sessions/171-owasp-zap-tool-demo Marudhamaran Gunasekaran: OWASP ZAP Tool Demo]'''
+'''2014 December 21: Skype: [http://weekendtesting.com/archives/3804 Dan Billing: WTEU-52 – Revealing security problems with OWASP ZAP]'''
-The OWASP Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. Originally a fork of the Paros Proxy project, ZAP targets a wide range of software professionals right from a software developer to a penetration tester working on any platform that supports Java. Equipped with a myriad a features and support for custom addons, ZAP is fully documented in an easy to understand language.
+If you were with us for WTEU-50 in October, you’ll remember that we took an introductory tour through the world of security testing. We analysed several different types of security vulnerability, and manually explored a demo application to see whether it was susceptible to these problems.
-We would see a demonstration of how to set up and how to use it all.
+On Sunday 21st, we’re taking things to the next level! We’re once again joined again by Dan Billing, who will be showing us how to use specialised (and often free) tools to help us uncover security weaknesses. These tools make it trivial to perform techniques such as fuzzing (automating different types of data injection) and scanning (monitoring application traffic for potential vulnerabilities) as part of your everyday test activities.

← Older revision		Revision as of 09:00, 29 October 2014
Line 2:		Line 2:


−	'''2014 October 16: ~~Skills Matter eXchange~~, ~~London~~: [~~https~~://~~skillsmatter~~.~~com~~/~~conferences~~/~~1912-london-tester-gathering-workshops~~-~~2014~~#~~program Bill Matthews~~: Security ~~Testing~~ with ~~OWASP ZAP: from zero to hero~~]'''	+	'''2014 October 31: Open World Forum, Paris, France: [http://www.openworldforum.paris/fr/tracks/security-secdev#talk_429 Sébastien Gioria: Application Security testing with Zed Attack Proxy]'''

−	~~More and more Security Testing is becoming part of the tester’s role and so we need to equip ourselves with the knowledge and tools to take on this challenge.~~	+	This will include both a talk and demo of ZAP.
−
−	~~A good tool for beginners and experienced security testers is the OWASP ZAP tool (voted best security tool 2013 by toolswatch.org) so in this session we~~ will ~~be using the OWASP ZAP tool to conduct~~ a ~~security test against a deliberately vulnerable web application through a series of guided exercises that will take you from knowing little or nothing about ZAP or security testing~~ and ~~give you a grounding in using ZAP for Security Testing that is beyond the majority~~ of ~~other ZAP users.~~
−
−
−	~~'''2014 October 16-17: Black Hat Arsenal, Amsterdam: [https://www.blackhat.com/eu-14/arsenal.html#zap Zakaria Rachid: OWASP~~ ZAP~~]'''~~
−
−	~~The Zed Attack Proxy (ZAP) is currently the most active open source web application security tool and competes effectively with commercial tools.~~
−
−	~~While it is an ideal tool for people new to appsec, it also has many features specifically intended for advanced penetration testing.~~
−
−	~~Zack will give a quick introduction to ZAP and then dive into the more advanced features, presenting some useful scripts as well as giving an overview of where its heading~~.