OWASP Autumn of Code 2006 - Projects: Testing Guide

AoC Candidate: Matteo

Project Coordinator: Eoin Keary

Project Progress: 0% Complete - Progress Page

Background and Motivation

History Behind Project The Testing guide originated in 2003 with Dan Cuthbert as one of the original editors. It was handed over to Eoin Keary in 2005 and transformed into a wiki. Being a wiki it is easier for people to contribute and should make updating much easier. Matteo Meucci has decided to take on the Testing guide (which is not a trivial feat) and update it.

Problem to be Addressed Many additional sections should be updated and reviewed. Also additional areas of discovery should be addressed. the guide currently covers alot but could (and should) cover much more.

Benefit to OWASP Members and Community A reference to the testing community that is updated by the community. It should provide many of the answers one would look for when testing the security of a web application.

Goals and Deliverables

The guide to be updated with a defined list pf topics and the current guide reviewed. the list of additional topics has been agreed with the AoC.

Plan of Approach A review of the existing matireal is required firstly. any matier that required updatign shall be rectified then. A defined list of additional topics shall then be added. The must be reviewed also for quality.

• Please refer to the progress page for updated information about the project

Here is the working Testing Guide to be reviewed

Feedback and Participation

We hope you find the information in the OWASP Testing project useful. Please contribute back to the project by sending your comments, questions, and suggestions to the OWASP Testing mailing list. Thanks!

To join the OWASP Testing mailing list or view the archives, please visit the subscription page.

Deliverables

A revised and updated Testing Guide which shall be more extensive than ever before.

Risks and Rewards

The size of this task can not be underestimated. It is a large time-consuming task.

Main Risks Non completion due to size. Overlap of the guide with other parts of the site.

Rewards of Successful Project

A extensive and nearly exhaustive guide on web application security testing.