OWASP WebGoat and PANTERA Web Assessment Studio Project.

•

6 gostaram•2,695 visualizações

I had the pleasure to talk at Belgium OWASP chapter. Here is a copy of the introduction presentation on WEBGOAT and the PANTERA Web Assessment Studio Project

Tecnologia

WEBGOAT and the Pantera Web Assessment Studio Project Philippe Bogaerts

Introduction ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Why am I here ? ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

What is the paper about ? ,[object Object],[object Object],[object Object]

WebGoat ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

WebGoat versions ,[object Object],[object Object],[object Object],[object Object],[object Object]

Installing WebGoat ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Connecting the first time ,[object Object],[object Object]

Configuration tuning ,[object Object],[object Object],[object Object],[object Object]

WebGoat V4 ,[object Object],[object Object],[object Object]

WebGoat is a training tool ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Example 1 ,[object Object],[object Object],[object Object],[object Object]

Example 3 ,[object Object],[object Object]

Example 4 ,[object Object],[object Object]

WebGoat V5 (rc1) ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Part 2: Pantera Web Assessment Studio Project

Pantera WASP, what is it ? ,[object Object],[object Object],[object Object],[object Object],[object Object]

Pantera ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

How to install ? ,[object Object],[object Object],[object Object],[object Object]

Install problems ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Managing Pantera ,[object Object],[object Object]

PPA plug-in ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Tools ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Mais conteúdo relacionado

Mais procurados

Spring forward: an introduction to Spring boot and ThymeleafFrank van der Linden

Building a Reddit Clone from the Ground UpUCLA Association of Computing Machinery

JavaOne 2014 Security Testing for Developers using OWASP ZAPSimon Bennetts

Make CSRF AgainNetsparker

Tale of Forgotten Disclosure and Lesson learnedAnant Shrivastava

Same-origin Policy (SOP)Netsparker

FlaskGlen Zangirolami

WatirSai Venkat

[OWASP Poland Day] Application frameworks' vulnerabilitiesOWASP

Automatic Test Results Publishing using SlackYelitza Ruales

Web2.0 : an introductionAnant Shrivastava

Testing Automaton - CFSummit 2016Ortus Solutions, Corp

[Wroclaw #7] Why So Serial?OWASP

My tryst with sourcecode reviewAnant Shrivastava

Hacking Vulnerable Websites to Bypass FirewallsNetsparker

Using the Zed Attack Proxy as a Web App testing toolDavid Sweigert

When you don't have 0days: client-side exploitation for the massesMichele Orru

[Wroclaw #7] AWS (in)security - the devil is in the detailOWASP

Understanding meteorM A Hossain Tonu

OWIN Web API with LinkyTomas Jansson

Mais procurados (20)

Spring forward: an introduction to Spring boot and Thymeleaf

Building a Reddit Clone from the Ground Up

JavaOne 2014 Security Testing for Developers using OWASP ZAP

Make CSRF Again

Tale of Forgotten Disclosure and Lesson learned

Same-origin Policy (SOP)

Flask

Watir

[OWASP Poland Day] Application frameworks' vulnerabilities

Automatic Test Results Publishing using Slack

Web2.0 : an introduction

Testing Automaton - CFSummit 2016

[Wroclaw #7] Why So Serial?

My tryst with sourcecode review

Hacking Vulnerable Websites to Bypass Firewalls

Using the Zed Attack Proxy as a Web App testing tool

When you don't have 0days: client-side exploitation for the masses

[Wroclaw #7] AWS (in)security - the devil is in the detail

Understanding meteor

OWIN Web API with Linky

Semelhante a OWASP WebGoat and PANTERA Web Assessment Studio Project.

Python Web Framework – A Detailed List of Web Frameworks in Pythonabhishekdf3

Web application penetration testing lab setup guideSudhanshu Chauhan

Web development with PythonRaman Balyan

Ramya devi R internet of thingsPriyadharshiniVS

Developing FirefoxOSFred Lin

Security, more important than ever!Marko Heijnen

Robot FrameworkOnur Baskirt

c0c0n2010 - Mauro Risonho de Paula Assumpcao

Microsoft WebsiteSpark & Windows Platform InstallerGeorge Kanellopoulos

Getting Started with ASP.NET vNextLohith Goudagere Nagaraj

Security assessment of mediawiki web-applicationFlorin D. Tanasache

Introducing OWASP OWTF Workshop BruCon 2012Abraham Aranguren

Workspace on asp.net web aplication developmentKBA Systems

Top 10 python frameworks for web development in 2020Alaina Carter

Netbeans65 Osum SlidesAbhishek Gupta

Forefront Unified Access Gateway 2010: An Introduction To Enterprise FeaturesFabrizio Volpe

Guide to Vite JS – Modern Fron-End Development ToolAlbiorix Technology

Django simplified : by weever mbakayaMbakaya Kwatukha

DevOps Camp 2017 NYC Local Development using Vagrant by Anthony AlvarezAnthony Alvarez

Semelhante a OWASP WebGoat and PANTERA Web Assessment Studio Project. (20)

Python Web Framework – A Detailed List of Web Frameworks in Python

Web application penetration testing lab setup guide

Web development with Python

Ramya devi R internet of things

Developing FirefoxOS

Security, more important than ever!

Robot Framework

c0c0n2010 -

Microsoft WebsiteSpark & Windows Platform Installer

Getting Started with ASP.NET vNext

Security assessment of mediawiki web-application

Introducing OWASP OWTF Workshop BruCon 2012

Workspace on asp.net web aplication development

Top 10 python frameworks for web development in 2020

Netbeans65 Osum Slides

Forefront Unified Access Gateway 2010: An Introduction To Enterprise Features

Guide to Vite JS – Modern Fron-End Development Tool

Django simplified : by weever mbakaya

DevOps Camp 2017 NYC Local Development using Vagrant by Anthony Alvarez

Último

Factors to Consider When Choosing Accounts Payable Services Providers.pptxKatpro Technologies

GenCyber Cyber Security Day PresentationMichael W. Hawkins

Slack Application Development 101 Slidespraypatel2

TrustArc Webinar - Stay Ahead of US State Data Privacy Law DevelopmentsTrustArc

How to convert PDF to text with Nanonetsnaman860154

Workshop - Best of Both Worlds_ Combine KG and Vector search for enhanced R...Neo4j

Histor y of HAM Radio presentation slidevu2urc

IAC 2024 - IA Fast Track to Search Focused AI SolutionsEnterprise Knowledge

CNv6 Instructor Chapter 6 Quality of Servicegiselly40

Kalyanpur ) Call Girls in Lucknow Finest Escorts Service 🍸 8923113531 🎰 Avail...gurkirankumar98700

08448380779 Call Girls In Civil Lines Women Seeking MenDelhi Call girls

Unblocking The Main Thread Solving ANRs and Frozen FramesSinan KOZAK

The Codex of Business Writing Software for Real-World Solutions 2.pptxMalak Abu Hammad

Presentation on how to chat with PDF using ChatGPT code interpreternaman860154

The 7 Things I Know About Cyber Security After 25 Years | April 2024Rafal Los

A Domino Admins Adventures (Engage 2024)Gabriella Davis

2024: Domino Containers - The Next Step. News from the Domino Container commu...Martijn de Jong

Boost PC performance: How more available memory can improve productivityPrincipled Technologies

08448380779 Call Girls In Diplomatic Enclave Women Seeking MenDelhi Call girls

Strategies for Unlocking Knowledge Management in Microsoft 365 in the Copilot...Drew Madelung