Gauntlet is the new open source tool to put rugged principles in the dev cycle. The project is just getting kicked off and we are looking for contributors.

1. Put your code through
the Gauntlet

2. gauntlet, n.
an attack from all sides

4. Your web app You

5. custom attacks dirbuster
metasploit sqlmap
fuzzers nessus
w3af nmap
Your web app You

6. Gauntlet is

7. an always-attacking
environment for
developers

8. with attacks written in
easy-to-read language

9. accessible to everyone
involved in dev, ops,
security, ...

10. Gauntlet includes

11. Why Gauntlet?
Security domain
knowledge is generally
a mystery to dev teams

12. Gauntlet allows dev
and ops and security to
communicate and
collaborate

13. Gauntlet joins:
The Philosophy of
Rugged Software
&
Principles of Behavior
Driven Development

14. You are now
commissioned as a
contributor to Gauntlet

15. Here is your badge

16. RUGGED
source: Jessica Allen, http://drbl.in/bgwy

17. github.com/wickett/gauntlet

18. Ideas to build

19. nmap to check ports

20. crawl site and search
for passwords in text
(assume fuzzing)

21. badness with LOIC,
slowloris, wget, curl

22. Include recon, scanning,
fuzzing, injecting, load

23. multi-vector attacks:
timing + load, fail
open, ...

24. these are just ideas, use
your imagination

25. lets build some tests!

26. github.com/wickett/gauntlet