OWASP WebGoat and PANTERA Web Assessment Studio Project.

•

6 gostaram•2,695 visualizações

I had the pleasure to talk at Belgium OWASP chapter. Here is a copy of the introduction presentation on WEBGOAT and the PANTERA Web Assessment Studio Project

Tecnologia

WEBGOAT and the Pantera Web Assessment Studio Project Philippe Bogaerts

Introduction ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Why am I here ? ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

What is the paper about ? ,[object Object],[object Object],[object Object]

WebGoat ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

WebGoat versions ,[object Object],[object Object],[object Object],[object Object],[object Object]

Installing WebGoat ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Connecting the first time ,[object Object],[object Object]

Configuration tuning ,[object Object],[object Object],[object Object],[object Object]

WebGoat V4 ,[object Object],[object Object],[object Object]

WebGoat is a training tool ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Example 1 ,[object Object],[object Object],[object Object],[object Object]

Example 3 ,[object Object],[object Object]

Example 4 ,[object Object],[object Object]

WebGoat V5 (rc1) ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Part 2: Pantera Web Assessment Studio Project

Pantera WASP, what is it ? ,[object Object],[object Object],[object Object],[object Object],[object Object]

Pantera ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

How to install ? ,[object Object],[object Object],[object Object],[object Object]

Install problems ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Managing Pantera ,[object Object],[object Object]

PPA plug-in ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Tools ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Mais conteúdo relacionado

Mais procurados

Spring forward: an introduction to Spring boot and ThymeleafFrank van der Linden

Building a Reddit Clone from the Ground UpUCLA Association of Computing Machinery

JavaOne 2014 Security Testing for Developers using OWASP ZAPSimon Bennetts

Make CSRF AgainNetsparker

Tale of Forgotten Disclosure and Lesson learnedAnant Shrivastava

Same-origin Policy (SOP)Netsparker

FlaskGlen Zangirolami

WatirSai Venkat

[OWASP Poland Day] Application frameworks' vulnerabilitiesOWASP

Automatic Test Results Publishing using SlackYelitza Ruales

Web2.0 : an introductionAnant Shrivastava

Testing Automaton - CFSummit 2016Ortus Solutions, Corp

[Wroclaw #7] Why So Serial?OWASP

My tryst with sourcecode reviewAnant Shrivastava

Hacking Vulnerable Websites to Bypass FirewallsNetsparker

Using the Zed Attack Proxy as a Web App testing toolDavid Sweigert

When you don't have 0days: client-side exploitation for the massesMichele Orru

[Wroclaw #7] AWS (in)security - the devil is in the detailOWASP

Understanding meteorM A Hossain Tonu

OWIN Web API with LinkyTomas Jansson

Mais procurados (20)

Spring forward: an introduction to Spring boot and Thymeleaf

Building a Reddit Clone from the Ground Up

JavaOne 2014 Security Testing for Developers using OWASP ZAP

Make CSRF Again

Tale of Forgotten Disclosure and Lesson learned

Same-origin Policy (SOP)

Flask

Watir

[OWASP Poland Day] Application frameworks' vulnerabilities

Automatic Test Results Publishing using Slack

Web2.0 : an introduction

Testing Automaton - CFSummit 2016

[Wroclaw #7] Why So Serial?

My tryst with sourcecode review

Hacking Vulnerable Websites to Bypass Firewalls

Using the Zed Attack Proxy as a Web App testing tool

When you don't have 0days: client-side exploitation for the masses

[Wroclaw #7] AWS (in)security - the devil is in the detail

Understanding meteor

OWIN Web API with Linky

Semelhante a OWASP WebGoat and PANTERA Web Assessment Studio Project.

Python Web Framework – A Detailed List of Web Frameworks in Pythonabhishekdf3

Web application penetration testing lab setup guideSudhanshu Chauhan

Web development with PythonRaman Balyan

Ramya devi R internet of thingsPriyadharshiniVS

Developing FirefoxOSFred Lin

Security, more important than ever!Marko Heijnen

Robot FrameworkOnur Baskirt

c0c0n2010 - Mauro Risonho de Paula Assumpcao

Microsoft WebsiteSpark & Windows Platform InstallerGeorge Kanellopoulos

Getting Started with ASP.NET vNextLohith Goudagere Nagaraj

Security assessment of mediawiki web-applicationFlorin D. Tanasache

Introducing OWASP OWTF Workshop BruCon 2012Abraham Aranguren

Workspace on asp.net web aplication developmentKBA Systems

Top 10 python frameworks for web development in 2020Alaina Carter

Netbeans65 Osum SlidesAbhishek Gupta

Forefront Unified Access Gateway 2010: An Introduction To Enterprise FeaturesFabrizio Volpe

Guide to Vite JS – Modern Fron-End Development ToolAlbiorix Technology

Django simplified : by weever mbakayaMbakaya Kwatukha

DevOps Camp 2017 NYC Local Development using Vagrant by Anthony AlvarezAnthony Alvarez

Semelhante a OWASP WebGoat and PANTERA Web Assessment Studio Project. (20)

Python Web Framework – A Detailed List of Web Frameworks in Python

Web application penetration testing lab setup guide

Web development with Python

Ramya devi R internet of things

Developing FirefoxOS

Security, more important than ever!

Robot Framework

c0c0n2010 -

Microsoft WebsiteSpark & Windows Platform Installer

Getting Started with ASP.NET vNext

Security assessment of mediawiki web-application

Introducing OWASP OWTF Workshop BruCon 2012

Workspace on asp.net web aplication development

Top 10 python frameworks for web development in 2020

Netbeans65 Osum Slides

Forefront Unified Access Gateway 2010: An Introduction To Enterprise Features

Guide to Vite JS – Modern Fron-End Development Tool

Django simplified : by weever mbakaya

DevOps Camp 2017 NYC Local Development using Vagrant by Anthony Alvarez

Último

Unblocking The Main Thread Solving ANRs and Frozen FramesSinan KOZAK

Slack Application Development 101 Slidespraypatel2

Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...Drew Madelung

How to Troubleshoot Apps for the Modern Connected WorkerThousandEyes

The Role of Taxonomy and Ontology in Semantic Layers - Heather Hedden.pdfEnterprise Knowledge

Handwritten Text Recognition for manuscripts and early printed textsMaria Levchenko

TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc

WhatsApp 9892124323 ✓Call Girls In Kalyan ( Mumbai ) secure servicePooja Nehwal

Axa Assurance Maroc - Insurer Innovation Award 2024The Digital Insurer

Injustice - Developers Among Us (SciFiDevCon 2024)Allon Mureinik

Presentation on how to chat with PDF using ChatGPT code interpreternaman860154

CNv6 Instructor Chapter 6 Quality of Servicegiselly40

04-2024-HHUG-Sales-and-Marketing-Alignment.pptxHampshireHUG

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Miguel Araújo

Partners Life - Insurer Innovation Award 2024The Digital Insurer

Automating Google Workspace (GWS) & more with Apps Scriptwesley chun

Breaking the Kubernetes Kill Chain: Host Path MountPuma Security, LLC

Exploring the Future Potential of AI-Enabled Smartphone Processorsdebabhi2

08448380779 Call Girls In Friends Colony Women Seeking MenDelhi Call girls

08448380779 Call Girls In Greater Kailash - I Women Seeking MenDelhi Call girls