OWASP - Recent changes [en]

OWASP Mantra - Security Framework

2012-05-20T15:32:45Z

Porto Alegre

2012-05-20T14:42:20Z

File:Logo Andrade Soto.png

2012-05-20T14:38:54Z

uploaded "[[File:Logo Andrade Soto.png]]"

Porto Alegre

2012-05-20T14:37:46Z

Morocco

2012-05-20T07:27:15Z

LatamTour2012 VEN Agenda

2012-05-19T16:55:04Z

German OWASP Day 2012

2012-05-19T14:34:55Z

Wir danken unseren Sponsoren:

Summary of Java Security Libraries

2012-05-19T10:13:48Z

Chile

2012-05-18T19:37:43Z

File:04 OWASP LatamTur2012 M.Martínez.pdf

2012-05-18T19:05:00Z

uploaded "[[File:04 OWASP LatamTur2012 M.Martínez.pdf]]"

File:03 OWASP LatamTur2012 G.Izunza.pdf

2012-05-18T19:04:32Z

uploaded "[[File:03 OWASP LatamTur2012 G.Izunza.pdf]]"

File:02 OWASP LatamTur2012 A.Bedini.pdf

2012-05-18T19:03:57Z

uploaded "[[File:02 OWASP LatamTur2012 A.Bedini.pdf]]"

File:05 OWASP LatamTur2012 F.Cerullo.pdf

2012-05-18T19:03:06Z

uploaded "[[File:05 OWASP LatamTur2012 F.Cerullo.pdf]]"

File:01 OWASP LatamTur2012 Bienvenida.pdf

2012-05-18T19:00:55Z

uploaded "[[File:01 OWASP LatamTur2012 Bienvenida.pdf]]"

Single Meeting Supporter

2012-05-18T17:17:56Z

Membership

2012-05-18T17:16:47Z

Local Chapter Supporter

2012-05-18T17:15:26Z

Individual Member

2012-05-18T17:14:50Z

Corporate Member

2012-05-18T17:14:03Z

Membership

2012-05-18T17:10:47Z

Talk:OWASP Review BSI IT-Grundschutz Baustein Webanwendungen

2012-05-18T16:26:50Z

M 4.WA14Restriktive Herausgabe sicherheitsrelevanter Informationen bei Web-Anwendungen (Markus):

User talk:Darrell Berninger

2012-05-18T12:14:57Z

Welcome!

New page

'''Welcome to ''OWASP''!'''
We hope you will contribute much and well.
You will probably want to read the [[Help:Contents|help pages]].
Again, welcome and have fun! [[User:Kelly Santalucia|Kelly Santalucia]] 12:14, 18 May 2012 (UTC)

User:Darrell Berninger

2012-05-18T12:14:57Z

Creating user page with biography of new user.

New page

Compliance Security Manager
CISSP, GSEC, GCFA, GCIH

User:Darrell Berninger

2012-05-18T12:14:57Z

created new account User:Darrell Berninger

User talk:Rajiv Sharma

2012-05-18T12:14:48Z

Welcome!

New page

User:Rajiv Sharma

2012-05-18T12:14:48Z

Creating user page with biography of new user.

New page

User:Rajiv Sharma

2012-05-18T12:14:48Z

created new account User:Rajiv Sharma

User:Pentrix

2012-05-18T12:14:39Z

created new account User:Pentrix

User:Pentrix

2012-05-18T12:14:39Z

Creating user page with biography of new user.

New page

User talk:Pentrix

2012-05-18T12:14:39Z

Welcome!

New page

User talk:Karthik

2012-05-18T12:14:31Z

Welcome!

New page

User:Karthik

2012-05-18T12:14:31Z

Creating user page with biography of new user.

New page

User:Karthik

2012-05-18T12:14:30Z

created new account User:Karthik

User:Syed Asif Iqbal

2012-05-18T12:14:20Z

created new account User:Syed Asif Iqbal

User:Syed Asif Iqbal

2012-05-18T12:14:20Z

Creating user page with biography of new user.

New page

User talk:Syed Asif Iqbal

2012-05-18T12:14:20Z

Welcome!

New page

User:Moaiead

2012-05-18T12:14:09Z

created new account User:Moaiead

User:Moaiead

2012-05-18T12:14:09Z

Creating user page with biography of new user.

New page

age:26
college student,studying IT

@@ Line 21: / Line 21: @@
 https://docs.google.com/spreadsheet/viewform?formkey=dGdDaWsybnd6cnJkc09rbFp0QWZNekE6MQ
-<br> Haverá ônibus disponível para deslocamento '''gratuito''' dos participantes de Porto Alegre -> Caxias do Sul -> Porto Alegre em local e horário a ser confirmado. Agradecemos a [http://www.andradesoto.com.br AndradeSoto Information Security ] pela disponibilização do transporte.
+<br> Haverá ônibus disponível para deslocamento '''gratuito''' dos participantes de Porto Alegre -> Caxias do Sul -> Porto Alegre em local e horário a ser confirmado. Agradecemos a [http://www.andradesoto.com.br AndradeSoto Information Security] pela disponibilização do transporte.
 <br> Agradecemos à [http://www.ucs.br UCS ] por ceder a infraestrutura para a realização da reunião do capítulo.

← Older revision		Revision as of 14:37, 20 May 2012
Line 20:		Line 20:

	https://docs.google.com/spreadsheet/viewform?formkey=dGdDaWsybnd6cnJkc09rbFp0QWZNekE6MQ		https://docs.google.com/spreadsheet/viewform?formkey=dGdDaWsybnd6cnJkc09rbFp0QWZNekE6MQ
		+
		+	<br> Haverá ônibus disponível para deslocamento '''gratuito''' dos participantes de Porto Alegre -> Caxias do Sul -> Porto Alegre em local e horário a ser confirmado. Agradecemos a [http://www.andradesoto.com.br AndradeSoto Information Security ] pela disponibilização do transporte.

	<br> Agradecemos à [http://www.ucs.br UCS ] por ceder a infraestrutura para a realização da reunião do capítulo.		<br> Agradecemos à [http://www.ucs.br UCS ] por ceder a infraestrutura para a realização da reunião do capítulo.

@@ Line 16: / Line 16: @@
 = Chapter Meetings  =
 == Web Application Security Seminar - May 18<sup>th</sup>, 2012 - at  VINCI School Rabat/Morocco ==
@@ Line 57: / Line 83: @@
 [[File:Fidens.jpg|none|300px|caption]]
 <br>
 = Resources =

@@ Line 84: / Line 84: @@
 |-
 | style="width:10%" valign="middle" height="30" bgcolor="#EEEEEE" align="center" colspan="0" | 14:30 - 15:15
-| style="width:27%" valign="middle" height="30" bgcolor="#EEEEEE" align="center" colspan="0" | Open Software Security Assurance Maturity Model (OpenSAMM)
+| style="width:27%" valign="middle" height="30" bgcolor="#EEEEEE" align="center" colspan="0" | OWASP Testing Guide
 | style="width:23%" valign="middle" height="30" bgcolor="#EEEEEE" align="center" colspan="0" | John Vargas
 | style="width:40%" valign="middle" height="30" bgcolor="#EEEEEE" align="center" colspan="0" | OWASP Latam Tour

@@ Line 41: / Line 41: @@
 == Wir danken unseren Sponsoren  ==
-{| cellspacing="5" cellpadding="2" border="0" align="left" style="width:99%;margin-bottom:1em;"
+{| cellspacing="5" cellpadding="2" border="0" align="left" style="width:97%;margin-bottom:1em;"
 | align="left" style="border-bottom:1px solid black;min-width:8em" colspan="3" | Platin
 |-
-| [[Image:Optimabit logo 692.33p.jpg|left|228x51px|www.optimabit.com]] [http://www.optimabit.com]
+| [[Image:Optimabit logo 692.33p.jpg|left|228x51px|link=http://www.optimabit.com/|www.optimabit.com]]
-<br>
 |-
@@ Line 52: / Line 51: @@
 | align="left" style="border-bottom:1px solid black;min-width:10em" | Bronze
 |-
-| [[Image:Sicsec-130x39.png|left|www.sicsec.de]] [http://www.sicsec.de]
+| [[Image:Sicsec-130x39.png|left|link=http://www.sicsec.de/|www.sicsec.de]]
-<br>
 | <!-- silber -->
 | <!-- bronze -->
@@ Line 62: / Line 59: @@
 |-
 | <br>
 |}

← Older revision	Revision as of 15:32, 20 May 2012
(One intermediate revision by one user not shown)

@@ Line 75: / Line 75: @@
 | align="center" | <br>
 | align="center" | <br>
-| align="center" | <br>
+| align="center" | Y<br>
 | align="center" | Y<br>
 | align="center" | <br>

@@ Line 211: / Line 211: @@
 = Documentos  =
-*OPEN SAMM
+== OWASP LATAMTOUR 2012 ==
-OPEN SAMM traducido al español. [http://www.opensamm.org/downloads/SAMM-1.0-es_MX.pdf descargar]
+*OWASP_LatamTour_bienvenida. [https://www.owasp.org/images/6/63/01_OWASP_LatamTur2012_Bienvenida.pdf descargar]
-*Owasp Top 10
+*Necesitas implantar PCI,¿Te dijeron qué hacer?. [https://www.owasp.org/images/b/b2/02_OWASP_LatamTur2012_A.Bedini.pdf descargar]
-Owasp Top 10 traducido al español. [https://www.owasp.org/images/2/2d/OWASP_Top_10_-_2010_FINAL_%28spanish%29.pdf descargar]
+*INGENIERÍA SOCIAL: HACKING PSICOLÓGICO [https://www.owasp.org/images/5/57/03_OWASP_LatamTur2012_G.Izunza.pdf descargar]
-*OWASP Secure Coding Practices
+*Seguridad en Bases de Datos [https://www.owasp.org/images/7/7a/04_OWASP_LatamTur2012_M.Mart%C3%ADnez.pdf descargar]
-OWASP Secure Coding Practices traducido al español. [http://www.owasp.org/images/c/c8/OWASP_SCP_Quick_Reference_Guide_SPA.doc descargar]
+*Desarrollo Seguro usando OWASP [https://www.owasp.org/images/3/34/05_OWASP_LatamTur2012_F.Cerullo.pdf descargar]
-OWASP SCP Quick Reference Guide SPA traducido al español. [https://www.owasp.org/images/a/aa/OWASP_SCP_Quick_Reference_Guide_SPA.pdf descargar]
+== OPEN SAMM ==

← Older revision		Revision as of 17:17, 18 May 2012
Line 6:		Line 6:
	Price is set by local chapter. Contact the local chapter that you want to work with. All payments to local chapters can be made via the donation button that is on each local chapter page we do this to centralize payments using Paypal and for bookkeeping purposes. If you have any questions or concerns please contact us.		Price is set by local chapter. Contact the local chapter that you want to work with. All payments to local chapters can be made via the donation button that is on each local chapter page we do this to centralize payments using Paypal and for bookkeeping purposes. If you have any questions or concerns please contact us.

−	[http://www.~~regonline~~.com/~~owasp_membership~~ https://www.owasp.org/images/2/2f/Donatenow.jpg]	+	[http://www.cvent.com/d/gcqpwh/3W https://www.owasp.org/images/2/2f/Donatenow.jpg]

@@ Line 35: / Line 35: @@
 {| border="1" cellpadding="2"
-! scope="col" width="250" | [http://www.regonline.com/owasp_membership https://www.owasp.org/images/2/2f/Donatenow.jpg]
+! scope="col" width="250" | [http://www.cvent.com/d/gcqpwh/3W  https://www.owasp.org/images/2/2f/Donatenow.jpg]
 ! scope="col" width="700" | OWASP is an Open community of Application Security Professionals.  The opportunities to participate in the organization are limitless
 |-

← Older revision		Revision as of 17:15, 18 May 2012
Line 15:		Line 15:
	Check with your local Chapter Leader to learn more about specific price levels for Chapter Supporters The funds donated are divided with 90% directly supporting the OWASP local chapter and 10% to the OWASP Foundation.		Check with your local Chapter Leader to learn more about specific price levels for Chapter Supporters The funds donated are divided with 90% directly supporting the OWASP local chapter and 10% to the OWASP Foundation.

−	[http://www.~~regonline~~.com/~~owasp_membership~~ https://www.owasp.org/images/2/2f/Donatenow.jpg]	+	[http://www.cvent.com/d/gcqpwh/3W https://www.owasp.org/images/2/2f/Donatenow.jpg]

@@ Line 7: / Line 7: @@
 *You will have (1) vote for annual elections on issues that shape the direction of the professional community.
-'''$50'''/USD 12 month term [http://www.regonline.com/owasp_membership https://www.owasp.org/images/2/2f/Donatenow.jpg]
+'''$50'''/USD 12 month term [http://www.cvent.com/d/gcqpwh/3W https://www.owasp.org/images/2/2f/Donatenow.jpg]
 [[newmembership|return to membership]]

@@ Line 9: / Line 9: @@
 *Optional - Host a local OWASP event/meeting to raise security awareness at your offices
-'''$5000'''/USD 12 month term [http://www.regonline.com/owasp_membership https://www.owasp.org/images/2/2f/Donatenow.jpg] OR with your purchase order, quarterly payments also accepted.
+'''$5000'''/USD 12 month term [http://www.cvent.com/d/gcqpwh/3W https://www.owasp.org/images/2/2f/Donatenow.jpg] OR with your purchase order, quarterly payments also accepted.
 [https://www.owasp.org/index.php/Corporate_Supporter_Bios Corporate Supporter Information]
 [[newmembership|return to membership]]

@@ Line 4: / Line 4: @@
-[http://www.regonline.com/owasp_membership Become a Member]
+[http://www.cvent.com/d/gcqpwh/3W Become a Member]
 == Membership Categories ==
 {| border="1" cellpadding="2"
-! scope="col" align="center" width="150" | [http://www.regonline.com/owasp_membership https://www.owasp.org/images/2/2f/Donatenow.jpg]
+! scope="col" align="center" width="150" | [http://www.cvent.com/d/gcqpwh/3W https://www.owasp.org/images/2/2f/Donatenow.jpg]
 ! scope="col" align="center" width="120" | [[Voice During Elections]]
 ! scope="col" align="center" width="120" | [[Recognition on OWASP.org Website]]

@@ Line 411: / Line 411: @@
 Fehlerfall" --> Hier könnte man noch auf Tar-Pits eingehen - nur ein Vorschlag.
-== M 4.WA06Session-Management bei Web-Anwendungen (Markus) ==
+== M 4.WA06Session-Management bei Web-Anwendungen (Markus, Matthias) ==
-; "Übertragung der
+; "Übertragung der SessionID mittels GETRequest" --> Hier fehlt der Hinweis, dass die Lebensdauer dieser SessionIds kurz/kürzer sein muss, als im Falle der Speicherung im Cookie.
 SessionID mittels GETRequest" --> Hier fehlt der Hinweis, dass die Lebensdauer dieser SessionIds kurz/kürzer sein muss, als im Falle der Speicherung im Cookie.
-; "Verschlüsselte
+([[User:Mrohr|Matthias]]) Die Anmerkung verstehe ich ehrlich gesagt ueberhaupt nicht, zumal das SM haeufig transparent zwischen Cookies und URL Rewriting wechselt. Wozu soll das gut sein? Wie soll das geschehen? Idealerweise sollte die Session ID niemals in die URL geschrieben werden, das sollte eigentlich genuegen.
 Übertragung von
-SessionIDs" --> Hier fehlt der Hinweis auf den Beast-Exploit. TLS Version > 1.0 verwenden!
+; "Verschlüsselte Übertragung von SessionIDs" --> Hier fehlt der Hinweis auf den Beast-Exploit. TLS Version > 1.0 verwenden!
 == M 4.WA07Fehlerbehandlung durch Web-Anwendungen (Markus) ==
@@ Line 430: / Line 445: @@
 automatisiertes Ermitteln von gültigen Login-Namen)" -- die Beispiele sind identisch - besser Beispiele suchen, z.b. URL-Enumeration
 == M 4.WA11Sichere Konfiguration von Web-Anwendungen (Markus) ==
@@ Line 437: / Line 453: @@
 ; Administration Consolen:zur Ergänzen: Wenn diese nicht benötigit, sollten derartige Applikationen nicht deployed werden, unabhängig von möglichen Zugangsbeschränkungen.
 == M 4.WA13Kontrolliertes Einbinden von Daten und Inhalten bei Web-Anwendungen (Markus) ==
@@ Line 444: / Line 461: @@
-== M 4.WA14Restriktive Herausgabe sicherheitsrelevanter Informationen bei Web-Anwendungen (Markus) ==
+== M 4.WA14Restriktive Herausgabe sicherheitsrelevanter Informationen bei Web-Anwendungen (Markus, Matthias) ==
 OK - Keine Anmerkungen von mir.
 == M 4.WA15Schutz vertraulicher Daten bei Web-Anwendungen (Markus) ==
@@ Line 469: / Line 508: @@
   Die Gefahr eines DOS wird hier nicht erwähnt.
-== M 4.WA19Verhinderung von Cross-Site Request Forgery (CSRF, XSRF) (Markus) ==
+== M 4.WA19Verhinderung von Cross-Site Request Forgery (CSRF, XSRF) (Markus, Matthias) ==
 ; Verantwortliche:
   Entwickler und Admins!