Difference between revisions of "OWASP OWTF"

OWASP OWTF

Introduction

OWTF aims to make pen testing:

• Aligned with OWASP Testing Guide + PTES + NIST
• More efficient
• More comprehensive
• More creative and fun (minimise un-creative work)

so that pentesters will have more time to

• See the big picture and think out of the box
• More efficiently find, verify and combine vulnerabilities
• Have time to investigate complex vulnerabilities like business logic/architectural flaws or virtual hosting sessions
• Perform more tactical/targeted fuzzing on seemingly risky areas
• Demonstrate true impact despite the short timeframes we are typically given to test.

Description

For more videos please see the YouTube channel

Licensing

What is OWTF?

OWASP OWTF is a project focused on penetration testing efficiency and alignment of security tests to security standards like: The OWASP Testing Guide (v3 and v4), the OWASP Top 10, PTES and NIST.

OWASP OWTF Installation

OWASP OWTF Releases

The current version of OWASP OWTF is OWTF 1.0.1 "Lionheart".

OWASP OWTF Documentation

Try some of the OWTF features from your browser!

OWASP OWTF Release blog posts

OWASP OWTF Talk blog posts

OWASP OWTF Mailing List

OWASP OWTF IRC Channel: #owtf on Freenode

Presentation

The following links provide access to materials for OWTF talks (video, slides, etc.):

OWTF Talks at 7-a.org

Project Leader

• Abraham Aranguren
• Bharadwaj Machiraju

Related Projects

Openhub

https://www.openhub.net/p/owasp-owtf

Quick Download

• Download now

Email List

Sign Up

News and Events

• October 5th 2014 - OWTF 1.0 "Lionheart" released!

• September 26th 2014 - OWTF 1.0 "Lionheart" presented at Brucon!

• September 4th 2014 - - OWTF participating in OWASP Winter Code Sprint

• January 13th 2014 - OWTF 0.45.0 "Winter Blizzard" released!

• December 11th 2013 - OWASP OWTF CFP funds contest WINNERS announced

• September 8th 2013 - OWASP OWTF CFP funds contest open!

• August 22nd-23rd 2013 - Introducing OWASP OWTF 5x5 @ OWASP AppSec EU

• August 9th 2013 - OWTF 0.30 "Summer Storm II" released!

• July 1st 2013 - OWTF 0.20 "Summer Storm I" released!

• June 12th 2013 - OWASP OWTF GSoC Selection, Stats and Poll

• May 24th 2013 - OWASP OWTF 0.16 "shady citizen" released, now working smoothly in Kali!

• April 22nd - May 3rd 2013 - Call for Student Proposals: OWASP OWTF will be part of the Google Summer of Code 2013

• April 24th 2013 - Pentesting like a Grandmaster with OWASP OWTF to be presented at BSides London 2013

• February 26th 2013 - OWASP OWTF selected to be supported by Brucon 5x5

• September 26th 2012 - OWASP OWTF Workshop at Brucon

• September 24th 2012 - OWASP OWTF 0.15 BruCon released!

In Print

Classifications