[Owasp-egypt] Fwd:Fwd: First major release of the OWASP O2 Platform - download and try it

omar.sherin at infosec2.com omar.sherin at infosec2.com
Tue Jul 6 07:38:02 EDT 2010

Just got this today, thought it might be useful

OWASP has released the first beta version of the project O2

O2 is designed to Automate Security Consultants Knowledge and Workflows and to Allow non-security experts to access and consume Security Knowledge

You can download it and give it a try from URLs below

PS: Since this morning we got 3 new members and 1 un-subscriber. probably couldn't handle the sudden flood of emails.
If any of the members feels thats too much SMTP, you can always choose to get a "daily" or a "weekly" digest which means you can get one mail at the end of each "day" or "week" containing everything the group discussed.

this feature can be selected from this link (https://lists.owasp.org/mailman/listinfo/owasp-egypt) then go to (Owasp-egypt Subscribers), then write your email and click on (Unsubscribe or edit options).  then edit your preferences (Digest/language) ...etc


About me:  http://qa.linkedin.com/in/osherin

Begin forwarded message:

From: dinis cruz <dinis.cruz at owasp.org<mailto:dinis.cruz at owasp.org>>

Hi OWASP Leaders

As you can see by my announcement (below) to the OWASP O2 Platform mailing list, the O2 project has finally reached a level of maturity that I am going to start promoting its use by our community (the download link is http://www.o2platform.com/wiki/O2_Release/v1.1_Beta)

If course that there is still a lot to do, and this is the first Beta release. That said, in the last couple weeks I was able to create a number of workflows and analysis that I really feel will help to raise the bar for large parts of our industry (see for example this video about WebGoat<http://www.o2platform.com/wiki/O2_Videos_on_YouTube#WebGoat_-_First_Example_of_O2.27s_WebGoat_API> or this video about HacmeBank<http://www.o2platform.com/wiki/O2_Videos_on_YouTube#HacmeBank_-_exploit.27s_execution_gui> (highlighting O2's BlackBox capabilities))

I would really appreciate if you could take the time to test this release and (for the project leaders) work with me in the integration of O2 with your project.

If you want to try this version of O2 by RDPing into a remote Windows box, I have a bunch of Amazon EC2 images that I can give you access (just ping me with your desired username and password)

Thanks for the help

Dinis Cruz

---------- Forwarded message ----------
From: dinis cruz <dinis.cruz at owasp.org<mailto:dinis.cruz at owasp.org>>
Date: 5 July 2010 17:01
Subject: First major release of the OWASP O2 Platform - please download and try it
To: owasp-o2-platform at lists.owasp.org<mailto:owasp-o2-platform at lists.owasp.org>

Hi O2 Community, after 6 months of dedicated development, I'm happy to announce that I finally published a first major release of the OWASP O2 Platform<http://www.owasp.org/index.php/O2> (with an installer, documentation+videos and a number of key/unique capabilities).

There is a brand new GUI which makes a massive difference in finding the available scripts, tools and APIS that exist inside O2 (if you tried the previous versions you will really appreciate this) . You can see the new GUI and access the download link at this page: http://www.o2platform.com/wiki/O2_Release/v1.1_Beta

This is the moment when I'm asking you to PLEASE TRY IT<http://www.o2platform.com/wiki/O2_Release/v1.1_Beta>, and provide feedback on: what you like, what works, what doesn't work, what could be improved, etc... (if you want to file a bug, please use this web interface http://code.google.com/p/o2platform/issues/list)

There is enough functionality + capabilities + power in this version of O2, that I finally have the confidence to make this direct request for you, knowing that no matter what area of Web Application Security you are involved in, there will be an O2 Script/Module/Tool that will make you more productive.

I plan to make a number of announcements about this release to a number of mailing lists, but first I really want to hear from you on the stability and usability of this release

Since the new GUI is very recent (completed it yesterday), most documentation<http://o2platform.com/wiki/Documentation> and videos available<http://o2platform.com/wiki/O2_Videos_on_YouTube> start with the previous GUI. But since I can now easily create detailed WIKI documentation pages and/or videos using O2 , my plan is to reply to your questions that way (i.e. with a video or wiki page)

In addition to the new GUI, there are a number of key O2 features and capabilities that I was finally able to piece together last week (for example the creation of a 'complete trace+animation for an HacmeBank vulnerability' packaged as a UnitTest). I will be documenting these in the next days/weeks. I will also be posting soon details about a new funding & commercial-services model for O2 and 3rd party companies.

So, have a go, try it and please post on this list as much details on your 'O2 experience' as possible.

Thanks for the help

Dinis Cruz

Blog: http://diniscruz.blogspot.com<http://diniscruz.blogspot.com/>
Twitter: http://twitter.com/DinisCruz
Web: http://www.owasp.org/index.php/O2 , http://www.o2platform.com<http://www.o2platform.com/>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/owasp-egypt/attachments/20100706/a92b2955/attachment-0001.html 
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: ATT00001..txt
Url: https://lists.owasp.org/pipermail/owasp-egypt/attachments/20100706/a92b2955/attachment-0001.txt 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/owasp-egypt/attachments/20100706/a92b2955/attachment-0001.htm 

More information about the Owasp-egypt mailing list