OWASP Faux Bank Project

• Main
• FAQs
• Acknowledgements
• Road Map and Getting Involved
• Project About

OWASP Faux Bank Project OWASP Faux Bank is... Introduction Description Faux bank has all 10 of the top vulnerabilities implemented, as well as fixes for these vulnerabilities. The idea is that developers can see a real-world system with vulnerabilities, so that they can see what to look for and how to write secure code Licensing OWASP Faux Bank is free to use. It is licensed under the Apache 2.0 license, so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

What is Faux Bank? OWASP Faux Bank provides: 3 of a website versions written in the 3 different languages (asp, php, c#) , including the database sql file, so that they can be setup and run by anyone. Presentation Project Leader Davie Elliott Related Projects Ohloh

Quick Download Email List Sign Up! News and Events In Print Classifications

Q1

A1

Q2

A2

Volunteers

Faux Bank is developed by a worldwide team of volunteers. The primary contributors to date have been:

• xxx
• xxx

Others

• xxx
• xxx

As of June, the priorities are:

• The classic asp version currently has 5 of 10 of the 10 vulnerabilities, I anticipate this version will be completed by July 30th. The php version should take more than a few weeks. The .net version will be tricker, but that should be completed by October/November - assuming I can still maintain my current hours on the project.

Involvement in the development and promotion of Faux Bank is actively encouraged! You do not have to be a security expert in order to contribute. Some of the ways you can help:

• xxx
• xxx

PROJECT INFO What does this OWASP project offer you?

RELEASE(S) INFO What releases are available for this project?

what is this project? Name: OWASP Faux Bank Project Purpose: Faux bank has all 10 of the top vulnerabilities implemented, as well as fixes for these vulnerabilities. The idea is that developers can see a real-world system with vulnerabilities, so that they can see what to look for and how to write secure code. License: Apache 2.0 license who is working on this project? Project Leader(s): Davie Elliott how can you learn more? Project Pamphlet: Not Yet Created Project Presentation: Mailing list: [owasp_faux_bank Mailing List Archives] Project Roadmap: Not Yet Created Key Contacts Contact Davie Elliott to contribute to this project Contact Davie Elliott to review or sponsor this project

current release OWASP Faux Bank v0.5 - 5th June 2014 - (download) Release description: 5 of the 10 vulnerabilities have been implemented in the Classic ASP version. Rating: Projects/OWASP Faux Bank Project/GPC/Assessment/OWASP Faux Bank v0.5 last reviewed release Not Yet Reviewed other releases