This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
OWASP DHS SWA Day 2010 OWASP WTE
The presentation
This presentation is given as part of OWASP Software Assurance Day at the | 13th Annual Software Assurance Forum.
The speaker
Notes
The OWASP Live CD is an educational supplement project containing tutorials, challenges and videos detailing the use of tools contained within the OWASP LiveCD - LabRat. This project was sponsored by OWASP Spring Of Code 2007 and Security Distro (Assessment Criteria v1.0)
It’s hard to be a tester if you have never been a developer. The goal of the CD was originally to create a ready-made environment in which to perform testing. The CD showcases great tools and contains not only OWASP tools.
The design goals include being easy to keep users up to date while being easy to update.There were gaps between the tools and the testing guides. The goal is to keep them aligned.
The OWASP Web Testing Environment (WTE) is the new name of the DVD which includes 26 significant tools. WTE also includes Firefox security add-ons, OWASP documents, a Top 10 risks list, VM software, and many other. WTE is also used as an education tool. The Webgoat tool is already being used for training classes.
WTE consists of more tools focused on developing instead of testing focused; there are more tools available via a repository for packages. Each tool will now automatically install dependent tools. WTE now runs on Ubuntu and each tool has its own Debian package. You can mix and match packages for only what you need to use. Some new features to be added in future versions are virtual installs, USB bootable install, customized versions of WTE via a la carte builds.
--Walter Houser 22:18, 5 October 2010 (UTC)
