|
|
| (4 intermediate revisions by 2 users not shown) |
| Line 1: |
Line 1: |
| − | = Main = | + | = [[OWASP iGoat Tool Project|Please click here for an updated wiki page]] = |
| − | <!-- DO NOT ALTER OR REMOVE THE TEXT ON NEXT LINE -->
| + | __NOTOC__ <headertabs></headertabs> |
| − | <div style="width:100%;height:100px;border:0,margin:0;overflow: hidden;">[[Image:OWASP Inactive Banner.jpg|800px| link=https://www.owasp.org/index.php/OWASP_Project_Stages#tab=Inactive_Projects]] </div>
| |
| | | | |
| − | iGoat is a learning tool for iOS developers (iPhone, iPad, etc.). It was inspired by the WebGoat project, and has a similar conceptual flow to it.
| + | [[Category:OWASP Project|iGoat Project]] |
| − | | |
| − | As such, iGoat is a safe environment where iOS developers can learn about the major security pitfalls they face as well as how to avoid them. It is made up of a series of lessons that each teach a single (but vital) security lesson.
| |
| − | | |
| − | The lessons are laid out in the following steps:
| |
| − | | |
| − | # Brief introduction to the problem.
| |
| − | # Verify the problem by exploiting it.
| |
| − | # Brief description of available remediations to the problem.
| |
| − | # Fix the problem by correcting and rebuilding the iGoat program.
| |
| − | | |
| − | Step 4 is optional, but highly recommended for all iOS developers. Assistance is available within iGoat if you don't know how to fix a specific problem.
| |
| − | | |
| − | iGoat is free software, released under the GPLv3 license.
| |
| − | | |
| − | The current version is 2.3, and it can be downloaded here: https://drive.google.com/folderview?id=0B4JD0hBwn1-uZmJXU0pfdEUtdlE&usp=sharing
| |
| − | | |
| − | = Framework =
| |
| − | | |
| − | iGoat has been designed and built to be a foundation on which to build a series of iOS security lessons. The initial iGoat release will include a handful of lessons to work through, but one of the aims of the project is to build a community of developers to help build out additional lessons over time -- much as WebGoat has before it.
| |
| − | | |
| − | Interested contributors are encouraged to contact the project leader (Ken van Wyk, [email protected]) to find out how they can contribute to future releases of iGoat. | |
| − | | |
| − | = Status =
| |
| − | | |
| − | The iGoat project was launched in May 2011. Version 2.3 was released on 20 November 2014. Source repository and download site:
| |
| − | | |
| − | http://code.google.com/p/owasp-igoat/
| |
| − | | |
| − | = Project About =
| |
| − | | |
| − | {{:Projects/OWASP iGoat Project | Project About}}
| |
| − | | |
| − | <br> __NOTOC__ <headertabs />
| |
| − | | |
| − | [[Category:OWASP_Project|iGoat Project]] | |
| | [[Category:OWASP_Tool]] | | [[Category:OWASP_Tool]] |
| | [[Category:OWASP_Alpha_Quality_Tool]] | | [[Category:OWASP_Alpha_Quality_Tool]] |
