Difference between revisions of "Category:OWASP Live CD Project"

Revision as of 16:44, 26 April 2007

Overview

The OWASP Live CD (LabRat) is a bootable CD akin to knoppix but dedicated to Application Security. It shall serve as a vehicle and distrubition medium for OWASP tools and guides.

BETA Release of OWASP LiveCD ready for testing

OWASP LiveCD is ready to download. This distro is Beta Version 0.8 named "LabRat" and is part of the OWASP Autumn of Code sponsorship. The distro is focused on providing all of OWASP tools and documents on a bootable CD. The goal is to have a portable distro that can be used by professional penetration testers,security admins, Students, or anyone interested in computer security to perform work,training, or research. All you have to do is burn the .ISO to DVD or start under Vmware/Virtual PC and you will have a full Linux desktop environment loaded with OWASP tools and documents.Another instant advantage is that the CD can be distributed within testing teams and new hires to ensure everyone has the same tools without spending a week setting up a laptop. Same scenario applies for students learning computer security. The CD contains the WebGoat application designed for learning about application vulnerabilities utilizing easy to follow lessons.( Version 5 will be included this month)

Details

I finally got back from holidays and spent the weekend to finish up the BETA version of the CD. It's quite large right now weighing in at 802mb so it's just big enough to use a DVD and not a CD. This will be much smaller once the first round of testing has been completed. The current release v08 seems to be fairly stable and works on most platforms I have tested on. When the CD boots up you will notice that all the OWASP tools and docs have icons on the desktop and can also be found in the programs menu. What I tried to do was follow the current OWASP naming convention -Releases,Beta, and Alpha.This keeps everything organized and also helps adding new tools and documents.

Issues

The CD is stable but I'm having problems starting WebGoat v4 again for some reason. I had this working on several test builds- However, when I burned the final Beta version it stopped for some reason. ( I may have corrupted a permission or something when I was chrooted back into the filesystem.)

What's Next?

I have not added tools yet other than OWASP docs and tools. Once the OWASP material is added and verified the specialty tools such as VOIP, RFID, and Wireless will be added.

BETA TESTERS

We encourage everyone to download the .ISO and give us feedback on what we can do to make it better. Also, what tools or docs would you like to have on the CD? The URL to the mailing list is [email protected] . I can also be contacted directly - [email protected]

Download

The distro can be downloaded from the PacketFocus website (http://www.packetfocus.com/hackos/AOC_Labrat-ALPHA-0010.iso) ((800mb)) After you download it just burn it to a DVD or use something like Vmware server to try it out. Vmware is a free download now (www.vmware.com)

Screenshots

LabRat 0.1 Screenshots

This project was sponsored by OWASP Autumn of Code 2006.

Download

The BETA version v.10 is now available to download. It can be found on the PacketFocus website http://www.packetfocus.com/hackos/AOC_Labrat-ALPHA-0010.iso The current version is about 800mb and contains 100's of linux applications. Most of these unneeded software will be removed from the next release to minimize .iso size.

Download via SecurityDistro http://downloads.securitydistro.com/labrat/AOC_Labrat-ALPHA-0008.iso http://downloads.securitydistro.com/labrat/AOC_Labrat-ALPHA-0010.iso

Features

LabRat v.08 *Current Beta Download

LiveCD Based on Morphix (www.morphix.org) Runs completely in Memory

Tools: WebGoat v4 WebScarab Paros JBroFuZZ Cal9000 Nmap TcpDump WireShark

Docs: OWASP Guide 2.0 OWASP Testing Guide

Future Development

News

OWASP Live CD BETA ready for Download! RC1 - 12:54, 01 Feb 2007 (GMT)

The RC1 version of the CD is now available for testing. The download can be found here: http://www.packetfocus.com/hackos/AOC_Labrat-ALPHA-0010.iso The latest version is v0.10 and is just around 800mb. This version has quite a few OWASP tools and documentation included. Have a look and email your ideas to [email protected]. We also encourage you to join the OWASP LiveCD mailing list to discuss requests for the next version.

Download via SecurityDistro http://downloads.securitydistro.com/labrat/AOC_Labrat-ALPHA-0008.iso http://downloads.securitydistro.com/labrat/AOC_Labrat-ALPHA-0010.iso

Feedback and Participation:

We hope you find the OWASP Live CD Project useful. Please contribute to the Project by volunteering for one of the Tasks, sending your comments, questions, and suggestions to [email protected]. To join the OWASP Live CD Project mailing list or view the archives, please visit the subscription page.

Graphics for Labrat ( Live Linux Distro )
If anyone would like to help out with the graphics for the Live Linux Distro please contact OWASP at packetfocus.com This would be a great project for University or even High School students to participate in the security community. The Distro was named "labrat" because it should contain all the tools necessary to perform labratory grade ethical hacking / auditing. And all of the other cool themes have been taken but other Distro's....

Project Contributors

Project Sponsor

Live CD sponsors: