Summer Code Sprint2015 - Revision history

Paul Chaignon: Add second mentor and fix a few typos for Hackademic Project

2015-08-05T19:56:44Z

Add second mentor and fix a few typos for Hackademic Project

Claudia casanovas at 01:18, 1 August 2015

2015-08-01T01:18:12Z

John Melton: add link to progress report tracking.

2015-07-20T17:08:43Z

add link to progress report tracking.

Mark Miller at 21:57, 15 July 2015

2015-07-15T21:57:28Z

Claudia casanovas at 20:45, 13 July 2015

2015-07-13T20:45:08Z

Claudia casanovas at 20:35, 13 July 2015

2015-07-13T20:35:14Z

Nikola Milosevic: /* OWASP Seraphimdroid - Setting checker and improving permission ranking algorithm */

2015-06-19T12:59:21Z

‎OWASP Seraphimdroid - Setting checker and improving permission ranking algorithm

Nikola Milosevic: /* OWASP Seraphimdroid - Open application for plugin development */

2015-06-19T11:00:54Z

‎OWASP Seraphimdroid - Open application for plugin development

Nikola Milosevic: /* OWASP Seraphimdroid - Setting checker and improving permission ranking algorithm */

2015-06-19T11:00:22Z

‎OWASP Seraphimdroid - Setting checker and improving permission ranking algorithm

Nikola Milosevic: /* OWASP Seraphimdroid */

2015-06-19T10:59:52Z

‎OWASP Seraphimdroid

@@ Line 112: / Line 112: @@
 ''' Brief explanation: '''
 Background problem to solve:
@@ Line 117: / Line 118: @@
 After some research we concluded that writing a python application that uses docker to deploy challenges would be the best way to go about it.
 Also, we need to provide a frontend to manage the deployed containers and integrate our existing analytics gathering system into the dockerized challenges.
-The installer of the application should take care of initializing both the cms and the containers without introducing too much complexity.
+The installer of the application should take care of initializing both the CMS and the containers without introducing too much complexity.
 Proposed solution:
 There is an easy to use python library for docker and there should be a frontend managing the containers we can use off the self with minimal modifications.
-The feature has already had a poc using linux containers, you can find it in the open merge requests of the project's github page.
+The feature has already had a PoC using Linux containers, you can find it in the open merge requests of the project's GitHub page.
 ''' Expected results '''
 * Integrate dockerized challenges in the platform.
 * PEP-8 compliant code in all provided python code
-* PSR compliant code in all php provided code
+* PSR compliant code in all PHP provided code
 * Sphinx/phpdoc friendly comments
 * Excellent reliability
@@ Line 136: / Line 138: @@
 ''' Prerequisites '''
-Some knowledge of test driven development, php, python, docker
+Some knowledge of test driven development, PHP, Python, Docker
 ''' OWASP Mentors '''
-=== Hackademic: Javascript Based Development Challenges ===
+Spyros Gasteratos (spyros.gasteratos@owasp.org) and Paul Chaignon (paul.chaignon@gmail.com).
 Brief explanation:
@@ Line 147: / Line 151: @@
 We are looking for challenges which are aimed towards secure coding.
-The user should be served with a piece of vulnerable javascript which fails the unit tests provided.
+The user should be served with a piece of vulnerable JavaScript which fails the unit tests provided.
 The user has to fix the vulnerability in a way that makes the unit tests pass.
@@ Line 158: / Line 162: @@
+}
 ''
-Use any javascript unit - testing framework to design a set of unit tests which call the function with all sorts of payloads and test if the user seems to have escaped userInput correctly,
+Use any JavaScript unit - testing framework to design a set of unit tests which call the function with all sorts of payloads and test if the user seems to have escaped userInput correctly,
 we're not looking for completeness a solid proof of concept implementation for future reference is acceptable.
 ''' Expected Results '''
 A complete implementation of challenges covering the top 10 according to our coding standards.
 === Hackademic - Migrate old code to the new coding standards ===
-'''Brief Explanation:'''
+'''Brief Explanation'''
 In the last project summit we decided to introduce code style and standards compliance checking for new commits and slowly migrate the old ones to the new setting.
@@ Line 176: / Line 186: @@
 We're looking for someone to assist in this migration.
-''''What you will have to do:'''
+''''What you will have to do'''
 * Introduce PSR-4 autoloading
 * Migrate all the existing code into PSR-1, PSR-2 naming and code style
@@ Line 183: / Line 194: @@
 * Add code coverage reports into the testing pipeline.
 * Add the remaining tests.
-* Write a travis.yml file to integrate the platform to travis ci.
+* Write a travis.yml file to integrate the platform to Travis CI.
-''' Knowledge Prerequisites: '''
+''' Knowledge Prerequisites '''
-* Php and bash experience
 * Writing unit and functional tests
 * Familiarity with Git is a plus
-* Familiar or willing and able to quickly learn concepts like autoloading, the psr standard, the sniff file syntax and travis
+* Familiar or willing and able to quickly learn concepts like autoloading, the PSR standard, the sniff file syntax and Travis CI
 === Hackademic: New Frontend ===
@@ Line 197: / Line 212: @@
 '''Brief Explanation'''
-Our current theme is written using Smarty Templates and basic html/css.
+Our current theme is written using Smarty Templates and basic HTML/CSS.
 It covers all of the platform's functionality but it's  from 2012 and it needs both visual and usability improvements.
 Your job will be to design and implement a new shiny theme using the latest in frontend technology.
 '''Expected Results'''
 * Come up with suggestions on which parts of the current frontend need usability improvements.
-* Write the new smarty-based template using the css and javascript frameworks you thing necessary.
+* Write the new smarty-based template using the CSS and JavaScript frameworks you thing necessary.
-* Code must be consistent with javascript and css coding standards and style.
+* Code must be consistent with JavaScript and CSS coding standards and style.
 ''' Knowledge Prerequisites '''
-* Experience in Javascript, CSS + experience or willing and able to learn  Frameworks such as bootstrap, foundation, semantic ui or Angular, jquery etc
+* Experience in JavaScript, CSS + experience or willing and able to learn  Frameworks such as bootstrap, foundation, semantic UI or Angular, jQuery, etc.
 * Experience in web design and implementation
 === OWASP OWTF  ===

← Older revision		Revision as of 01:18, 1 August 2015
Line 2:		Line 2:

	== OWASP Summer Code Sprint 2015 ==		== OWASP Summer Code Sprint 2015 ==
−
−	~~== Progress ==~~
−
−	~~Update: Track progress on the [[Summer_Code_Sprint2015_Progress_Reports]]~~

	== Goal ==		== Goal ==

← Older revision		Revision as of 17:08, 20 July 2015
Line 2:		Line 2:

	== OWASP Summer Code Sprint 2015 ==		== OWASP Summer Code Sprint 2015 ==
		+
		+	== Progress ==
		+
		+	Update: Track progress on the [[Summer_Code_Sprint2015_Progress_Reports]]

	== Goal ==		== Goal ==

← Older revision		Revision as of 21:57, 15 July 2015
Line 1:		Line 1:
		+	[[File:Summer_of_Code_Sprint_2015.png\|link=https://soundcloud.com/owasp-podcast/owasp-summerofcodesprint2015-final\|Listen to the OWASP 24/7 Broadcast]]
		+
	== OWASP Summer Code Sprint 2015 ==		== OWASP Summer Code Sprint 2015 ==

← Older revision		Revision as of 20:45, 13 July 2015
Line 1:		Line 1:
−	== OWASP Summer of Code Sprint 2015 ==	+	== OWASP Summer Code Sprint 2015 ==

	== Goal ==		== Goal ==

← Older revision		Revision as of 20:35, 13 July 2015
Line 1:		Line 1:
−	== OWASP Summer Code Sprint 2015 ==	+	== OWASP Summer of Code Sprint 2015 ==

	== Goal ==		== Goal ==

@@ Line 1,116: / Line 1,116: @@
 '''Mentors:''' [[User:Nikola Milosevic|Nikola Milosevic]] - OWASP Seraphimdroid Project Leader
-=== [https://www.owasp.org/index.php/OWASP_SeraphimDroid_Project  OWASP Seraphimdroid]  - Setting checker and improving permission ranking algorithm ===
+=== [https://www.owasp.org/index.php/OWASP_SeraphimDroid_Project  OWASP Seraphimdroid]  - Settings checker and improving permission ranking algorithm ===
 '''Brief Explanation:'''

← Older revision		Revision as of 11:00, 19 June 2015
Line 1,094:		Line 1,094:


−	=== [https://www.owasp.org/index.php/OWASP_SeraphimDroid_Project OWASP Seraphimdroid] - Open ~~application~~ for plugin development ===	+	=== [https://www.owasp.org/index.php/OWASP_SeraphimDroid_Project OWASP Seraphimdroid] - Open Seraphimdroid for external plugin development ===

	'''Brief Explanation:'''		'''Brief Explanation:'''

@@ Line 1,128: / Line 1,128: @@
 * Create a settings check - check whether settings are set according to best practices (development options turned off, debugging off, etc.)
 * Fix some bugs like fixing application locker on Lollipop, update and improve recieving SMS alarming, etc.
 * Bonus: Create a widget

@@ Line 1,094: / Line 1,094: @@
-=== [https://www.owasp.org/index.php/OWASP_SeraphimDroid_Project  OWASP Seraphimdroid] ===
+=== [https://www.owasp.org/index.php/OWASP_SeraphimDroid_Project  OWASP Seraphimdroid]  - Open application for plugin development ===
 '''Brief Explanation:'''
@@ Line 1,104: / Line 1,104: @@
 The project should produce:
 * Application should be modified to a platform that will allow other developers to create android application and services as a plugins to OWASP Seraphimdroid, where the collected data on data leaks, security breaches and other things application are doing could be viewed through OWASP Seraphimdroid application.
 * We are also looking for a new ideas how to evaluate the dangers coming from the permissions applications are requesting. Currently there is a simple algorithm that is labelling red, yellow and green apps, but in many cases red apps just request multiple permissions. We are looking for a solution that will somehow give a weight to permissions and based on it evaluate it more realistically.
 * Create a settings check - check whether settings are set according to best practices (development options turned off, debugging off, etc.)