This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "OWASP Mantra - Security Framework"
| Line 103: | Line 103: | ||
[http://getmantra.com/forums/Thread-owasp-mantra-c0c0n-11-and-appseclatam-11-release OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release]<br/> | [http://getmantra.com/forums/Thread-owasp-mantra-c0c0n-11-and-appseclatam-11-release OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release]<br/> | ||
[http://www.ekoparty.org/2011/workshops/owasp-mantra-security-framework.php Mantra at Ekoparty Security Conference]<br/> | [http://www.ekoparty.org/2011/workshops/owasp-mantra-security-framework.php Mantra at Ekoparty Security Conference]<br/> | ||
| − | [https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Mantra at OWASP LatamTour - Buenos Aires, Argentina] | + | [https://www.owasp.org/images/d/dc/OWASP-Mantra_BAires-Argentina.ppt Mantra at OWASP LatamTour - Buenos Aires, Argentina]<br/> |
| − | Getting secure with Mantra: An open source penetration testing kit - [http://www.computerworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss Computer World] [http://www.cio.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ CIO] [http://www.techworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ Tech World] [http://www.cso.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss CSO] | + | Getting secure with Mantra: An open source penetration testing kit - 1. [http://www.computerworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss Computer World] 2. [http://www.cio.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ CIO] 3. [http://www.techworld.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/ Tech World] 4. [http://www.cso.com.au/article/392346/getting_secure_mantra_an_open_source_penetration_testing_kit/?uts_source=taxonomyfeed&utm_medium=rss CSO] |
[http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 Searchsecurity Screencast]<br/> | [http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 Searchsecurity Screencast]<br/> | ||
[http://getmantra.com/forums/Thread-mantra-in-matriux-upcoming-release-leaked Mantra in Matriux Security Distribution]<br/> | [http://getmantra.com/forums/Thread-mantra-in-matriux-upcoming-release-leaked Mantra in Matriux Security Distribution]<br/> | ||
| Line 189: | Line 189: | ||
'''Video Tutorials'''<br/> | '''Video Tutorials'''<br/> | ||
| + | [http://link.brightcove.com/services/player/bcpid1078581830001?bclid=1077362296001&bctid=1078245078001 SearchSecurity Screencast]<br/> | ||
ClubHACK 2010 - [http://www.youtube.com/watch?v=GBFxVAM3DLQ 1] [http://www.youtube.com/watch?v=bKACEDWKeyM 2] [http://www.youtube.com/watch?v=qpVHWVOPHTk 3]<br/> | ClubHACK 2010 - [http://www.youtube.com/watch?v=GBFxVAM3DLQ 1] [http://www.youtube.com/watch?v=bKACEDWKeyM 2] [http://www.youtube.com/watch?v=qpVHWVOPHTk 3]<br/> | ||
[http://www.youtube.com/watch?v=yTbB42sR208 Broken Authentication Demonstration]<br/> | [http://www.youtube.com/watch?v=yTbB42sR208 Broken Authentication Demonstration]<br/> | ||
Revision as of 17:55, 18 October 2011
Main
- Mantra is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers,security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software.
- Mantra is lite, flexible, portable and user friendly with a nice graphical user interface. You can carry it in memory cards, flash drives, CD/DVDs, etc. It can be run natively on Linux, Windows and Mac platforms. It can also be installed on to your system within minutes. Mantra is absolutely free of cost and takes no time for you to set up.
- Create an ecosystem for hackers based on browser
- To bring the attention of security people to the potential of a browser based security platform
- Provide easy to use and portable platform for demonstrating common web based attacks( read training )
- To associate with other security tools/products to make a better environment. Eg:
- It can be a nice addition to security distribution OSs like OWASP Live CD
- It can be used to solve basic levels of CTF contests
- It can associate with projects like DVWA to showcase attacks
- It can bring functions like crawler, SQL injection scanner etc by installing extensions.
Download Mantra - Security Framework
Tools
" A sword never kills anybody; it is a tool in the killer's hand." - Lucius Annaeus Seneca
Mantra is a powerful set of tools to make the attacker's task easier. The beta version of Mantra Security Toolkit contains following tools built onto it. Moreover Mantra follows the guidelines and structure of FireCAT which makes it even more accessible. You can also always suggest any tools/ scripts that you would like see in the next release.
- Information Gathering
- Whois
- Flagfox
- Flagfox
- Location Info
- Flagfox
- Flagfox
- Enumeration and Fingerprint
- Host Spy
- JSView
- PassiveRecon
- View Dependencies
- Wappalyzer
- Host Spy
- Data Mining
- People Search Engine
- Facebook search
- People Search Engine
- Whois
- Editors
- Cert Viewer Plus
- Firebug
- JSView
- Cert Viewer Plus
- Network Utilities
- Protocols and applications
- Fire FTP
- DNS Cache
- SQLite Manager
- Fire FTP
- Sniffers
- HTTP Fox
- HTTP Fox
- Password
- CryptoFox 2.0
- CryptoFox 2.0
- Protocols and applications
- Misc
- Tweaks and Hacks
- Greasemonkey
- Greasefire
- Greasemonkey
- Malware scanner
- Web of Trust
- Web of Trust
- Automation
- iMacros
- iMacros
- Others
- CacheToggle 0.6
- URL Flipper
- CacheToggle 0.6
- Tweaks and Hacks
- Application Auditing
- Hackbar
- JavaScript Deobfuscator
- RESTClient
- Tamper Data
- Live HTTP Headers
- RefControl
- User Agent Switcher
- Web Developer
- DOM Inspector
- Inspect This
- Formfox
- Exploit Me
- Access Me
- SQL Inject Me
- XSS Me
- Access Me
- Cookies
- Cookies Manager+ 1.5.1
- Firecookie
- Cookies Manager+ 1.5.1
- Hackbar
- Proxy
- FoxyProxy Standard 2.22.6
- HttpFox
- FoxyProxy Standard 2.22.6
News
Computer Weekly Article
OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release
Mantra at Ekoparty Security Conference
Mantra at OWASP LatamTour - Buenos Aires, Argentina
Getting secure with Mantra: An open source penetration testing kit - 1. Computer World 2. CIO 3. Tech World 4. CSO
Searchsecurity Screencast
Mantra in Matriux Security Distribution
Mantra in Backtrack 5 - Penetration Testing Distribution
Mantra – Free and Open Source Security Framework' - published in India's first hacking magazine ClubHack Mag
ClubHACK 2010 Mantra release
Contributors
"It is purpose that created us, purpose that connects us, purpose that pulls us, that guides us, that drives us, that binds us, it is purpose that defines us." - Agent Smith
Project Leaders
Abhi M Balakrishnan
Yashartha Chaturvedi
Gokul C Gopinath
Other Members
Maximiliano Soler
Gopu C Gopinath
Download
" All things are difficult before they are easy." - Thomas Fuller
OWASP Mantra c0c0n 11 and AppSecLatam 11 Release ( 0.71 Beta )
| Platform | Details | Links |
| Linux 32 bit | MD5: 8e874e6d4e119111bf3dbcbe0f9a1c69 | Mirror 1 Mirror 2 Torrent |
| Linux 64 bit | MD5: d0ed8fce30a20ad907a97047985e8c05 | Mirror 1 Mirror 2 Torrent |
| Windows | MD5: 98517c9f61561d8c656a2d2436f2333d | Mirror 1 Mirror 2 Torrent |
| Macintosh | MD5: 949808a8f75fa0bcc5730cdcf73f7844 | Mirror 1 Mirror 2 Torrent |
| Source | MD5: 6fdb5e9408261d741f24cb83df4b4066 | Mirror 1 Mirror 2 Torrent |
Project About
| PROJECT INFO What does this OWASP project offer you? |
RELEASE(S) INFO What releases are available for this project? | |||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
| |||||||||||||||||||||||||||||||||||||||||||||||
Resources
Project Pamphlets
Project Presentations
Text Tutorials
Introducing PassiveRecon by Justin Morehouse
Introducing Groundspeed by Felipe
Introducing Link Sidebar by Varun N
Introducing ProxyTool by Robert Rade
Introducing HttpFox by Martin Theimer
How to make your own search bar item
Switching between languages and locales
Running Mantra and Firefox together
Login Form Bypass using Mantra Security Toolkit
Advanced SQL Injection Tutorial - Complete website rooting
Manual Crawling
Introducing Flagfox
Video Tutorials
SearchSecurity Screencast
ClubHACK 2010 - 1 2 3
Broken Authentication Demonstration
Broken Session Demonstration
Insecure Direct Object References Demonstration
Cross Site Scripting Demonstration
Links
Main Website
Discussion Forums
Facebook Page
Tumblr
Twitter
Vimeo
Sourceforge
Google Code
Youtube
