Difference between revisions of "Category:OWASP .NET Project"

Latest

• 31st August: OWASP Autumn Of Code 2006, Today we are lauching a new project called "OWASP Autumn of Code 2006" which will sponsor individuals to work on existing OWASP Projects.
• 31st August: Dinis Cruz video interview, Dinis talks about .NET security, the future of OWASP, and the brand new Autumn of Code project.
• 14 August: Finished adding in the {{Template:Stub}} to the pages - Mike de Libero
• 29 July: New finding Full Trust CLR Verification issue: changing the return address order
• 28 July: Added new tool .Net Assembly Analyzer
• 27 July: New Layout for home page
• 25 July: Made tons of changes to lots of pages (from new content, to images, etc...)
• 20 July: Owasp Report Generator page with links for download
• Uploaded latest version of Owasp SiteGenerator(including the source code) to SourceForge and updated the links in Owasp SiteGenerator
• 11 July: Microsoft Security Bulletin July 2006-Vulnerabilities in IIS and ASP.Net
• 11 July: We have started to upload the Owasp .Net Projects to SourceForge dotNET section. SiteGenerator is up there and more will follow.

Unless marked, the above entries were posted by Dinis.cruz

Current Projects

• Owasp SiteGenerator (sponsored by Foundstone)
• Owasp Report Generator
• ANBS (Asp.Net Baseline Security) - includes the tools SAM'SHE (Security Analyzer for Microsoft's Shared Hosting Environments) and Online IIS Metabase Explorer
• ASP.NET Reflector
• ANSA (Asp.Net Security Analyzer) - first tool developed by Dinis Cruz that hilights the security problems of Full Trust Asp.Net code (contains Proof of Concept tests (i.e. exploits))
• DefApp - Partial port of ModSecurity to the .Net Platform
• Owasp FOSBBWAS (code name Beretta)
• .Net Assembly Analyzer

Related Foundstone Open souce projects

• Hacme Bank (Foundstone tool)
• .NetMon (Foundstone tool)
• Validator.NET (Foundstone tool)

Note: All releases are available on the dotNET section of the SourceForge Owasp Project pages

.Net Security

• .Net Full Trust (the execution environment that makes an Asp.Net Application Insecure by Default, by Design and in Deployment)
• .Net Type Safety
• .Net Framework Security Issues
• Rooting The CLR

Other misc stuff

• London Chapter WAF event
• Security Podcasts
• CVS details for Editors
• Wiki Edit Tips
• Code Samples
  • .Net Code Sample - Reflecting assembly with missing dependency
  • Files_Xml_WindowsMessages (with serialization stuff)
• .Net Research Links
• .Net Security Tools
• Richard Crypto .Net Stuff
• 2006 Autumn Of Code