This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org

Difference between revisions of "OWASP O2 Platform"

From OWASP
Jump to: navigation, search
Line 1: Line 1:
==== Project Details  ====
+
==== Home Page ====
 +
 
 +
O2 is a collection of Open Source modules that help Web Application Security Professionals to maximize their efforts and quickly obtain high visibility into an application's security profile.
 +
 
 +
Originally O2 (OunceOpen) originated from OunceLabs Advanced Research Team (ART) work,  and aims to push to the limit the power of multiple Static Analysis engines.
 +
 
 +
These tools have been developed by Security Professionals FOR security professionals, and are designed to automate the security consultant's brain
 +
 
 +
'''What is O2'''
 +
 
 +
To gain a better understanding of "what is O2?" start with [http://www.o2-ounceopen.com/files-binaries-source-and-demo/old-documents-and-presentations/O2%20Modules%20Presentation%20V1.0.pdf this presentation]
 +
 
 +
Try O2!
 +
 
 +
Download the latest version of the Binaries, Installers or Source Code (from Files (Binaries, Source and Demos))
 +
 
 +
* Binaries: [http://www.o2-ounceopen.com/files-binaries-source-and-demo/_Bin_O2_Binaries%20-%2011-sep-09.zip _Bin_(O2_Binaries)]
 +
* Source Code: [http://www.o2-ounceopen.com/files-binaries-source-and-demo/_SourceCode_O2%2011-Sep-09.zip _SourceCode]
 +
 
 +
Or can install the most commonly used O2 Modulesdirectly from the web (using Click Once) at http://deploy.o2-ounceopen.com/:
 +
 
 +
* O2_Tool_RulesManager - Powerful viewer and editor for Ounce's Rules
 +
* O2_Tool_FindingsViewer- Powerful Filter and Editor for Ozasmt files
 +
* O2_Tool_CirViewer- View and create (for .NET) CIR (Common Intermediate Representation) Objects
 +
* O2_Tool_SearchEngine- RegEx text search based GUI
 +
* O2_Tool_CSharpScripts- Edit and Debug c# Scripts
 +
* O2_Tool_DotNetCallbacksMaker- Automatically create Ounce Rules for .NET Callbacks
 +
* O2_Tool_FindingsQuery- Filter Ozasmt files using LAMDA like queries
 +
* O2_Tool_JavaExecution- Write O2 scripts in Java
 +
* O2_Tool_JoinTraces- Join traces (for example .NET and Web and Web Services layer)
 +
* O2_Tool_Python- Write O2 scripts in Python
 +
* O2_Tool_O2Scripts- O2 scripts editor (includes O2 Object Model)
 +
* O2_WebInspect(PoC of Integrating Ounce's & WebInspect's assessment data)
 +
 
 +
For demo files try these
  
{{:OWASP O2 Platform Project - Project Identification}}
+
* O2 demo Pack 25_11_2008.zip
 +
* Updated version ofHacmeBank
  
 
==== Mailing list ====
 
==== Mailing list ====
  
 
You can join the O2 Platform Mailing list [https://lists.owasp.org/mailman/listinfo/owasp-o2-platform using this form] or you can read its [https://lists.owasp.org/mailman/listinfo/owasp-o2-platform archives here]. After being subscribed you can email this list using the owasp-o2-platform (at) lists.owasp.org email address
 
You can join the O2 Platform Mailing list [https://lists.owasp.org/mailman/listinfo/owasp-o2-platform using this form] or you can read its [https://lists.owasp.org/mailman/listinfo/owasp-o2-platform archives here]. After being subscribed you can email this list using the owasp-o2-platform (at) lists.owasp.org email address
 +
 +
 +
==== Project Details  ====
 +
 +
{{:OWASP O2 Platform Project - Project Identification}}
  
  
 
[[Category:OWASP_O2_Platform]]
 
[[Category:OWASP_O2_Platform]]

Revision as of 19:52, 13 October 2009

Home Page

O2 is a collection of Open Source modules that help Web Application Security Professionals to maximize their efforts and quickly obtain high visibility into an application's security profile.

Originally O2 (OunceOpen) originated from OunceLabs Advanced Research Team (ART) work, and aims to push to the limit the power of multiple Static Analysis engines.

These tools have been developed by Security Professionals FOR security professionals, and are designed to automate the security consultant's brain

What is O2

To gain a better understanding of "what is O2?" start with this presentation

Try O2!

Download the latest version of the Binaries, Installers or Source Code (from Files (Binaries, Source and Demos))

Or can install the most commonly used O2 Modulesdirectly from the web (using Click Once) at http://deploy.o2-ounceopen.com/:

  • O2_Tool_RulesManager - Powerful viewer and editor for Ounce's Rules
  • O2_Tool_FindingsViewer- Powerful Filter and Editor for Ozasmt files
  • O2_Tool_CirViewer- View and create (for .NET) CIR (Common Intermediate Representation) Objects
  • O2_Tool_SearchEngine- RegEx text search based GUI
  • O2_Tool_CSharpScripts- Edit and Debug c# Scripts
  • O2_Tool_DotNetCallbacksMaker- Automatically create Ounce Rules for .NET Callbacks
  • O2_Tool_FindingsQuery- Filter Ozasmt files using LAMDA like queries
  • O2_Tool_JavaExecution- Write O2 scripts in Java
  • O2_Tool_JoinTraces- Join traces (for example .NET and Web and Web Services layer)
  • O2_Tool_Python- Write O2 scripts in Python
  • O2_Tool_O2Scripts- O2 scripts editor (includes O2 Object Model)
  • O2_WebInspect(PoC of Integrating Ounce's & WebInspect's assessment data)

For demo files try these

  • O2 demo Pack 25_11_2008.zip
  • Updated version ofHacmeBank

Mailing list

You can join the O2 Platform Mailing list using this form or you can read its archives here. After being subscribed you can email this list using the owasp-o2-platform (at) lists.owasp.org email address


Project Details

PROJECT INFO
What does this OWASP project offer you?
RELEASE(S) INFO
What does this OWASP project release offer you?
what is this project?
OWASP O2 Platform Project

Purpose: Collection of Open Source modules that help Web Application Security Professionals to maximize their efforts and quickly obtain high visibility into an application's security profile.
NOTE: most of the O2 Platform content is still on the external website www.o2-ounceopen.com

License: N/A

who is working on this project?
Project Leader: Dinis Cruz @

Project Maintainer: Dinis Cruz @

Project Contributor(s): N/A

how can you learn more?
Project Pamphlet: N/A

3x slide Project Presentation: N/A

Mailing list: Subscribe or read the archives

Project Roadmap: To view, click here

Main links:

Project Health: Yellow button.JPG Not Reviewed (Provisional)
To be reviewed under Assessment Criteria v2.0

Key Contacts
  • Contact Dinis Cruz @ to contribute, review or sponsor this project
  • Contact the GPC to report a problem or concern about this project or to update information.
current release
First Release - Unknown Date - (download)

Release Leader: N/A

Release details: Main links, release roadmap and assessment

Rating: Yellow button.JPG Not Reviewed
To be reviewed under Assessment Criteria v2.0