[Owasp-testing] spreadsheets for testing guide / top ten

[Boberski, Michael [USA]]

FYI, the Top 10 in general isn't criteria, it's a datasheet.

It's very incomplete, for your purposes.

Mike B.


________________________________
From: owasp-testing-bounces at lists.owasp.org [mailto:owasp-testing-bounces at lists.owasp.org] On Behalf Of Jonathan Cran
Sent: Sunday, December 13, 2009 11:25 PM
To: mike.boberski at gmail.com
Cc: owasp-testing at lists.owasp.org
Subject: Re: [Owasp-testing] spreadsheets for testing guide / top ten

Cool, i'll check that out. In the meantime, here's a spreadsheet version of the 2010 Top10.

http://www.0x0e.org/x/OWASP-Top10-2010.xls

Cross-posting on the owasp-top10 list.

jcran

--
Jonathan Cran
jcran at 0x0e.org<mailto:jcran at 0x0e.org>
515.890.0080

On Sun, Dec 13, 2009 at 11:11 PM, Mike Boberski <mike.boberski at gmail.com<mailto:mike.boberski at gmail.com>> wrote:
Perhaps consider ASVS, there is an XML version you could use, see the
project page

On 12/13/09, Jonathan Cran <jcran at 0x0e.org<mailto:jcran at 0x0e.org>> wrote:
> A while back there was a thread discussing the need for a spreadsheet
> version of the testing guide (see;
> https://lists.owasp.org/pipermail/owasp-testing/2008-May/001540.html) . i
> think the debate was mainly centered around whether or not an xls file would
> be acceptable.
>
> I was wondering if anything like this had been published?
>
> I've created versions in the past. I think it definitely makes sense to
> offer this as a supplement to the OWASP testing guide (and top 10), based on
> how many testers like to "check-off" portions of a test.
>
> Thoughts?
>
> jcran
>


--
Mike
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/owasp-testing/attachments/20091214/64ad779b/attachment.html