Template:OWASP News

Jan 2 - The Best Security Books Reference OWASP

There are over 50 security books that reference OWASP. Many of the authors are contributing to OWASP, speaking at our conferences, and participating in our chapters. Some of the books just recommend OWASP, but many are structured around OWASP, and others have whole chapters dedicated to our tools.

Nov 28 - JBroFuzz 0.3 Released

This version adds a more stable core, length updating for fuzzed POST requests and allows you to specify your own fuzz vectors in a separate file.

Nov 26 - OWASP Report Generator 0.88 Released

A tool for security consultants that supports the documentation and reporting of security vulnerabilities discovered during security.

Nov 26 - OWASP Site Generator v.70 Released

A tool that allows the creating of dynamic websites based on XML files and predefined vulnerabilities (some simple, some complex) for testing application security tools.

Nov 14 - Three great new OWASP projects

1) OWASP Encoding Project A nice encoding library that supports Java, .NET, PHP, Python, Perl, JavaScript, and Ajax. 2) OWASP WSFuzzer Project A fuzzing tool for Web Services to support penetration testing efforts. 3) OWASP Insecure Web App Project A realistic but insecure Java EE web application for use in learning and testing tools.

Nov 12 - New OWASP Application Security Search Engine

We're beta-testing a new Google-powered search engine for application security. The engine indexes the OWASP site and all the other sites dedicated to application security on the Internet. We've set up some simple refinements so that you can ignore commercial, product, or non-OWASP sites if you like. Please give us some feedback if you have ideas for improvement.

Nov 7 - OWASP Hits Two-Million Page Views

Thank you all for your support! We serve approximately 1/2 million page views every month.

Older news...