This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "OWASP O2 Platform"

From OWASP
Jump to: navigation, search
 
(92 intermediate revisions by 13 users not shown)
Line 1: Line 1:
−
==== Home Page ====
+
=Main=
  
−
O2 is a collection of Open Source modules that help Web Application Security Professionals to maximize their efforts and quickly obtain high visibility into an application's security profile.
+
<div style="width:100%;height:90px;border:0,margin:0;overflow: hidden;">[[File: lab_big.jpg|link=OWASP_Project_Stages#tab.3DLab_Projects]]</div>
  
−
Originally O2 (OunceOpen) originated from OunceLabs Advanced Research Team (ART) work, and aims to push to the limit the power of multiple Static Analysis engines.
+
{| style="padding: 0;margin:0;margin-top:10px;text-align:left;" |-
 +
| valign="top" style="border-right: 1px dotted gray;padding-right:25px;" |
  
−
These tools have been developed by Security Professionals FOR security professionals, and are designed to automate the security consultant's brain
+
==OWASP O2 Platform==
  
−
'''NOTE: this OWASP section of O2 is still under very heavy construction, so for now, please see  http://www.o2-ounceopen.com for the latest O2-related updates and downloads'''
+
Collection of Open Source modules that help Web Application Security Professionals to maximize their efforts and quickly obtain high visibility into an application's security profile.
  
−
'''What is O2'''
+
==Introduction==
  
−
To gain a better understanding of "what is O2?" start with [http://www.o2-ounceopen.com/files-binaries-source-and-demo/old-documents-and-presentations/O2%20Modules%20Presentation%20V1.0.pdf this presentation]
+
The O2 platform represents a new paradigm for how to perform, document and distribute Web Application security tests and scripts.  
  
−
Try O2!
+
O2 is designed to '''Automate Security Consultants Knowledge and Workflows''' and to '''Allow non-security experts to access and consume Security Knowledge'''
  
−
Download the latest version of the Binaries, Installers or Source Code (from Files (Binaries, Source and Demos))
+
==Description==
 +
The O2 platform represents a new paradigm for how to perform, document and distribute Web Application security reviews. O2 is designed to Automate Security Consultants Knowledge and Workflows and to Allow non-security experts to access and consume Security Knowledge.
  
−
* Binaries: [http://www.o2-ounceopen.com/files-binaries-source-and-demo/_Bin_O2_Binaries%20-%2011-sep-09.zip _Bin_(O2_Binaries)]
+
O2 can also be a very powerful prototyping and fast-development tool for .NET. For more details on the O2 Platform see  http://o2platform.wordpress.com website which currently being used to host the help files and documentation pages.  
−
* Source Code: [http://www.o2-ounceopen.com/files-binaries-source-and-demo/_SourceCode_O2%2011-Sep-09.zip _SourceCode]
 
  
−
Or can install the most commonly used O2 Modulesdirectly from the web (using Click Once) at http://deploy.o2-ounceopen.com/:
 
  
−
* O2_Tool_RulesManager - Powerful viewer and editor for Ounce's Rules
+
==Licensing==
−
* O2_Tool_FindingsViewer- Powerful Filter and Editor for Ozasmt files
+
OWASP O2 Platform is free to use. It is licensed under the Apache License, version 2.0.
−
* O2_Tool_CirViewer- View and create (for .NET) CIR (Common Intermediate Representation) Objects
 
−
* O2_Tool_SearchEngine- RegEx text search based GUI
 
−
* O2_Tool_CSharpScripts- Edit and Debug c# Scripts
 
−
* O2_Tool_DotNetCallbacksMaker- Automatically create Ounce Rules for .NET Callbacks
 
−
* O2_Tool_FindingsQuery- Filter Ozasmt files using LAMDA like queries
 
−
* O2_Tool_JavaExecution- Write O2 scripts in Java
 
−
* O2_Tool_JoinTraces- Join traces (for example .NET and Web and Web Services layer)
 
−
* O2_Tool_Python- Write O2 scripts in Python
 
−
* O2_Tool_O2Scripts- O2 scripts editor (includes O2 Object Model)
 
−
* O2_WebInspect(PoC of Integrating Ounce's & WebInspect's assessment data)
 
  
−
For demo files try these
 
  
−
* O2 demo Pack 25_11_2008.zip
+
| valign="top"  style="padding-left:25px;width:200px;border-right: 1px dotted gray;padding-right:25px;" |
−
* Updated version ofHacmeBank
 
  
−
==== Mailing list ====
+
== What is O2 Platform? ==
  
−
You can join the O2 Platform Mailing list [https://lists.owasp.org/mailman/listinfo/owasp-o2-platform using this form] or you can read its [https://lists.owasp.org/mailman/listinfo/owasp-o2-platform archives here]. After being subscribed you can email this list using the owasp-o2-platform (at) lists.owasp.org email address
+
OWASP O2 Platform provides:
  
 +
'''Requirements:'': Windows and .NET Framework 3.5 for the main apis and 4.5 for the installer
  
−
==== Project Details  ====
+
'''Source code''': The source code for the O2 Platform is available for download at GitHub:
  
−
{{:OWASP O2 Platform Project - Project Identification}}
+
'''Git Hub repositories'''
 +
* FluentSharp: https://github.com/o2platform/O2.FluentSharp
 +
* O2 Platform Scripts: https://github.com/o2platform/O2.Platform.Scripts
 +
* O2 Platform Projects: https://github.com/o2platform/O2.Platform.Projects
 +
* Misc and Legacy projects: https://github.com/o2platform/O2.Platform.Projects.Misc_and_Legacy
  
 +
== Presentation ==
  
−
[[Category:OWASP_O2_Platform]]
+
[http://www.slideshare.net/DinisCruz/owasp-o2-platform-november-2010 Owasp O2 Platform ] - Automating Security Knowledge through Unit Tests
 +
 
 +
== Project Leader ==
 +
 
 +
[mailto:[email protected] Diniz Cruz]
 +
 
 +
== Ohloh (OpenHub) ==
 +
 
 +
see https://www.openhub.net/p/o2platform
 +
 
 +
| valign="top"  style="padding-left:25px;width:200px;" |
 +
 
 +
== Quick Download ==
 +
'''May 2016 - v6.0''':  [https://bintray.com/o2-platform/Main-Exe/download_file?file_path=O2+Platform+Installer+v6.0.msi O2 Platform installer v6.0] - this is a windows msi installer which requires admin privs
 +
 
 +
'''April 2013 - v5.5''':  [https://bintray.com/o2-platform/Main-Exe/download_file?file_path=O2_Platform_5.5_RC1.zip O2 Platform - Main O2 Gui] - this is a '''Windows Stand-Alone exe''' which will create a number of folders on first load (dependencies and temp files)
 +
 
 +
== Email List ==
 +
 
 +
[https://groups.google.com/a/owasp.org/forum/#!forum/o2-platform OWASP O2 Platform Mailing list]
 +
 
 +
== News and Events ==
 +
* 2013/Nov/8 : Webinar "Using the O2 Platform to Automate Application Security Knowledge and Workflows"
 +
* 2013/Jul/20: Released version 5.3 of the [https://o2platform.googlecode.com/files/O2%20Platform%20-%20Main%20O2%20Gui%20v5.3.exe O2 Platform main GUI]
 +
* 2013/Feb/8 : Released version 5.1 of the [http://o2platform.googlecode.com/files/O2%20Platform%20-%20Main%20O2%20Gui%20v5.1.exe O2 Platform main GUI]
 +
* 2013/Feb/8 : Helped [[UK]] Chapters to visualize its locations: [http://blog.diniscruz.com/2013/02/o2-script-to-create-google-static-map.html O2 Script to create Google Static map with OWASP UK Chapter locations]
 +
 
 +
== In Print ==
 +
 
 +
 
 +
==Classifications==
 +
 
 +
  {| width="200" cellpadding="2"
 +
  |-
 +
  | align="center" valign="top" width="50%" rowspan="2"| [[File:Midlevel projects.png|100px|link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Incubator_Projects]]
 +
  | align="center" valign="top" width="50%"| [[File:Owasp-builders-small.png|link=]] 
 +
  |-
 +
  | align="center" valign="top" width="50%"| [[File:Owasp-defenders-small.png|link=]]
 +
  |-
 +
  | colspan="2" align="center"  | [[File:Cc-button-y-sa-small.png|link=http://creativecommons.org/licenses/by-sa/3.0/]]
 +
  |-
 +
  | colspan="2" align="center"  | [[File:Project_Type_Files_CODE.jpg|link=]]
 +
  |}
 +
 
 +
|}
 +
 
 +
=Downloads=
 +
 
 +
'''May 2016 - v6.0''':  [https://bintray.com/o2-platform/Main-Exe/download_file?file_path=O2+Platform+Installer+v6.0.msi O2 Platform installer v6.0] - this is a windows msi installer which requires admin privs
 +
 
 +
'''April 2013 - v5.5''':  [https://bintray.com/o2-platform/Main-Exe/download_file?file_path=O2_Platform_5.5_RC1.zip O2 Platform - Main O2 Gui] - this is a '''Windows Stand-Alone exe''' which will create a number of folders on first load (dependencies and temp files)
 +
 
 +
All download files are hosted at BinTray: https://bintray.com/o2-platform
 +
 
 +
 
 +
 
 +
<!-- hiding the ones below since they need work done
 +
 
 +
=FAQs=
 +
 
 +
; Q1
 +
: A1
 +
 
 +
; Q2
 +
: A2
 +
 
 +
= Acknowledgements =
 +
==Volunteers==
 +
O2 Platform is developed by a worldwide team of volunteers. The primary contributors to date have been:
 +
 
 +
* xxx
 +
* xxx
 +
 
 +
==Others==
 +
* xxx
 +
* xxx
 +
 
 +
= Road Map and Getting Involved =
 +
As of July, the priorities are:
 +
* xxx
 +
* xxx
 +
* xxx
 +
 
 +
Involvement in the development and promotion of O2 Platform is actively encouraged!
 +
You do not have to be a security expert in order to contribute.
 +
Some of the ways you can help:
 +
* xxx
 +
* xxx
 +
 
 +
-->
 +
 
 +
=Project About=
 +
{{:Projects/OWASP O2 Platform Project | Project About}} 
 +
 
 +
__NOTOC__ <headertabs />
 +
 
 +
[[Category:OWASP Project]]  [[Category:OWASP_Builders]] [[Category:OWASP_Defenders]]  [[Category:OWASP_Document]][[Category:SAMM-CR-2]]

Latest revision as of 09:01, 16 June 2016

Lab big.jpg

OWASP O2 Platform

Collection of Open Source modules that help Web Application Security Professionals to maximize their efforts and quickly obtain high visibility into an application's security profile.

Introduction

The O2 platform represents a new paradigm for how to perform, document and distribute Web Application security tests and scripts.

O2 is designed to Automate Security Consultants Knowledge and Workflows and to Allow non-security experts to access and consume Security Knowledge

Description

The O2 platform represents a new paradigm for how to perform, document and distribute Web Application security reviews. O2 is designed to Automate Security Consultants Knowledge and Workflows and to Allow non-security experts to access and consume Security Knowledge.

O2 can also be a very powerful prototyping and fast-development tool for .NET. For more details on the O2 Platform see http://o2platform.wordpress.com website which currently being used to host the help files and documentation pages.


Licensing

OWASP O2 Platform is free to use. It is licensed under the Apache License, version 2.0.


What is O2 Platform?

OWASP O2 Platform provides:

'Requirements:: Windows and .NET Framework 3.5 for the main apis and 4.5 for the installer

Source code: The source code for the O2 Platform is available for download at GitHub:

Git Hub repositories

Presentation

Owasp O2 Platform - Automating Security Knowledge through Unit Tests

Project Leader

Diniz Cruz

Ohloh (OpenHub)

see https://www.openhub.net/p/o2platform

Quick Download

May 2016 - v6.0: O2 Platform installer v6.0 - this is a windows msi installer which requires admin privs

April 2013 - v5.5: O2 Platform - Main O2 Gui - this is a Windows Stand-Alone exe which will create a number of folders on first load (dependencies and temp files)

Email List

OWASP O2 Platform Mailing list

News and Events

In Print

Classifications

Midlevel projects.png Owasp-builders-small.png
Owasp-defenders-small.png
Cc-button-y-sa-small.png
Project Type Files CODE.jpg

May 2016 - v6.0: O2 Platform installer v6.0 - this is a windows msi installer which requires admin privs

April 2013 - v5.5: O2 Platform - Main O2 Gui - this is a Windows Stand-Alone exe which will create a number of folders on first load (dependencies and temp files)

All download files are hosted at BinTray: https://bintray.com/o2-platform



PROJECT INFO
What does this OWASP project offer you? 		RELEASE(S) INFO
What releases are available for this project?
what is this project?
Name: OWASP O2 Platform Project (home page)
Purpose: Collection of Open Source modules that help Web Application Security Professionals to maximize their efforts and quickly obtain high visibility into an application's security profile.

NOTE: most of the O2 Platform content is still on the external website
www.o2platform.com

License: Apache License, Version 2.0
who is working on this project?
Project Leader(s):
how can you learn more?
Project Pamphlet: Not Yet Created
Project Presentation:
Mailing list: Mailing List Archives
Project Roadmap: View
Main links:
Key Contacts
current release
O2 Platform v4.0 beta - 04/April/2012 - (download)
Release description: N/A
Rating: Yellow button.JPG Not Reviewed - Assessment Details
last reviewed release
Not Yet Reviewed


other releases

Retrieved from "https://wiki.owasp.org/index.php?title=OWASP_O2_Platform&oldid=217983"