Difference between revisions of "OWASP .NET Active Projects"

Revision as of 02:56, 4 April 2008

OWASP Projects

Note: All releases are available on the dotNET section of the SourceForge OWASP Project pages

• Owasp SiteGenerator (sponsored by Foundstone)
• Owasp Report Generator
• ANBS (Asp.Net Baseline Security) - includes the tools SAM'SHE (Security Analyzer for Microsoft's Shared Hosting Environments) and Online IIS Metabase Explorer
• ASP.NET Reflector
• ANSA (Asp.Net Security Analyzer) - first tool developed by Dinis Cruz that hilights the security problems of Full Trust Asp.Net code (contains Proof of Concept tests (i.e. exploits))
• DefApp - Partial port of ModSecurity to the .Net Platform
• Owasp FOSBBWAS (code name Beretta)
• .Net Assembly Analyzer
• OWASP Tiger

Sponsored Projects

• Hacme Bank (Foundstone tool)
• .NetMon (Foundstone tool)
• Validator.NET (Foundstone tool)

Active Project Workspaces

• Task and Research projects
• FXCop Ruleset
• Sprajax
• CSSpider
• Code Scanner

Source Code Repositories

Any repository that allows public access and has terms of service that holds no claim on the content that our members upload is generally o.k. The following repos are popular among the members:

• OWASP @ Assembla.com
• OWASP @ Codeplex
• OWASP @ Google Code
• OWASP @ SourceForge

Starting your own .NET Project

If you're interested in starting your own project, please read How to Start an OWASP Project. Remember to add the tag: [[Category:OWASP .NET Project]] to the end of new projects so that they're properly categorized.