[Owasp-testing] Status Report - Testing Guide v2 - 29nd October 06

Matteo Meucci matteo.meucci at gmail.com
Sun Oct 29 17:12:07 EST 2006


Hi all,
Here is the Testing Guide status report of the 4th week:

 Week 04 - Oct 29
=============
* Now every contributor is writing his own article.
* There are already some small teams working together at the same article.
* A few contributors have added the articles on our Portal. If you
have any problem to write the article on the Wiki portal please
contact me.

Next:
====
* I remember you our deadline:  5th November to write the first draft
for the (we have only one week to finish our work).
* If you are writing an article with another contributor I suggest you
to contact him to share your informations and create a unique article
(if you have not the email please contact me).
* If you have any problem/suggestion about writing an article, please
feel free to contact me.

Progress State of each paragraph (on Wiki portal):
====================================
Note:
***  (0%,TD) means that none is writing this article
*** ( 50%, Alice ) means that Alice is writing this article and the
progress status is nearly 50%
*** (0%) means that the paragraph is assigned to the upper contributor
and that the article is still without content
====================================

Frontispiece

1.1 About The Open Web Application Security Project (100%)
1.1.1 Overview (100%)
1.1.2 Structure (100%)
1.1.3 Licensing (100%)
1.1.4 Participation and Membership (100%)
1.1.5 Projects (100%)
1.1.6 OWASP Privacy Policy (100%)
1.2 About the OWASP Testing Guide Project
1.1 Copyright (100%, Review)
1.2 Editors (0%, Review)
1.3 Authors and Reviewers (0%, Review)
1.4 Revision History(0%, Review)
1.5 Trademarks(100%)

Introduction

2.1 The OWASP Testing Project (100%, Review)
2.2 Principles of Testing (100%, Review)
2.3 Testing Techniques Explained (100%, Review)

The OWASP Testing Framework

Mark Curphey, Daniel Cuthbert, Andrew van der Stock, Larry Shields,
Javier Fernández-Sanguino, Stan Guzik, Harinath Pudipeddi, Glyn
Geoghegan, Mauro Bregolin
3.1. Overview (90%, Review)
3.2. Phase 1 — Before Development Begins (100%, Review)
3.3. Phase 2: During Definition and Design(100%, Review)
3.4. Phase 3: During Development(100%, Review)
3.5. Phase 4: During Deployment(100%, Review)
3.6. Phase 5: Maintenance and Operations(100%, Review)
3.7. A Typical SDLC Testing Workflow (100%, Review)

Web Application Penetration Testing

4.1 Introduction and objectives (20%, Matteo Meucci)
4.2 Information Gathering (30%, Carlo Pelliccioni)
4.2.1 Application Discovery (20%, Mauro Bregolin
4.2.2 Spidering and googling (0%, Tom Brennan)
4.2.3 Analysis of error code (50%, Carlo Pelliccioni)
4.2.4 Infrastructure configuration management testing (80%, Review)
4.2.4.1 SSL/TLS Testing (100%,Mauro Bregolin,Review)
4.2.4.2 DB Listener Testing (0%, Alexander Kornbrust)
4.2.5 Application configuration management testing (90%, Review)
4.2.5.1 File extensions handling (80%,Mauro Bregolin, Review)
4.2.5.2 Old, backup and unreferenced files (80%,Mauro Bregolin, Review)
4.3 Business logic testing (50%,Madhura Halasgikar)
4.4 Authentication Testing (50%, TD)
4.4.1 Default or guessable (dictionary) user account (90%, TD)
4.4.2 Brute Force (0%,Giorgio Fedon, Andrea Lombardini)
4.4.3 Bypassing authentication schema (0%,Giorgio Fedon, Andrea Lombardini)
4.4.4 Directory traversal/file include (0%, Luca Carettoni)
4.4.5 Vulnerable remember password and pwd reset (90%, Ralph M.
Los,Alberto Revelli)
4.4.6 Logout and account expiry (0%,Alberto Revelli)
4.5 Session Management Testing (50%,Glyn Geoghegan, Meucci)
4.5.1 Cookie and Session token Manipulation(reg, forg/brute force)
(100%,Alberto Revelli, Matteo Meucci Review)
4.5.2 Weak session tokens (70%, Meucci)
4.5.3 Session Riding (XSRF) (100%, Mauro Bregolin,Review)
4.5.4 Exposed session variables (0%,TD)
4.5.5 HTTP Exploit (0%, Arian J.Evans)
4.6 Data Validation Testing 0% TD
4.6.1 Cross site scripting (20%, Tom Brennan)
4.6.1.1 HTTP Methods and XST (0%, Alberto Revelli)
4.6.2 SQL Injection (30%, Alexander Kornbrust, Antonio Parata)
4.6.2.1 Stored procedure injection (0%,TD)
4.6.2.2 Oracle testing (0%,Alexander Kornbrust)
4.6.2.3 MySQL testing (0%, Stefano Di Paola)
4.6.2.4 SQL Server testing (0%,Ariel Waissbein)
4.6.3 ORM Injection (0%,TD)
4.6.4 LDAP Injection (0%,Stefano Di Paola)
4.6.5 XML Injection (0%,Antonio Parata, Stefano Di Paola)
4.6.6 SSI Injection (0%,Claudio Merloni)
4.6.7 XPath Injection (0%, Antonio Parata, Alberto Revelli, Stefano Di Paola)
4.6.8 IMAP/SMTP Injection (0%, Vicente Aguilera)
4.6.9 Code Injection (0%, TD)
4.6.10 OS Commanding (0%, TD)
4.6.11 Buffer overflow Testing (100%, Review)
4.6.11.1 Heap overflow (100%, Review)
4.6.11.2 Stack overflow (100%, Review)
4.6.11.3 Format string (100%, Review)
4.6.12 Incubated vulnerability testing (0%,Ariel Waissbein)
4.7 Denial of Service Testing 95% Review
4.7.1 Locking Customer Accounts 100% Review
4.7.2 Buffer Overflows 100% Review
4.7.3 User Specified Object Allocation 100% Review
4.7.4 User Input as a Loop Counter 100% Review
4.7.5 Writing User Provided Data to Disk 100% Review
4.7.6 Failure to Release Resources 100% Review
4.7.7 Storing too Much Data in Session 90% Review
4.8 Web Services Testing (20%,Eoin Keary, Mark Roxberry)
4.8.1 XML Structural Testing (90%)
4.8.2 XML content-level Testing (10%)
4.8.3 HTTP GET parameters/REST Testing (10%)
4.8.4 Naughty SOAP attachments (0%)
4.8.5 Brute force Testing (0%)

4.9 AJAX Testing (0%, Dan Cornell, Giorgio Fedon, Stefano Di Paola)
4.9.1 Vulnerabilities (0%, Anush Shetty)
4.9.2 How to test (0%)

Writing Reports: value the real risk

5.1 How to value the real risk (0%, Daniel Cuthbert, Matteo Meucci,
Sebastien Deleersnyder)
5.2 How to write the report of the testing (0%, Daniel Cuthbert, Tom Brennan) TD

Thanks,
Mat


--
Matteo Meucci
OWASP-Italy Chair, CISSP, CISA
http://www.owasp.org/index.php/Italy
OWASP Testing Guide AoC
http://www.owasp.org/index.php/OWASP_Autumn_of_Code_2006_-_Projects:_Testing_Guide



More information about the Owasp-testing mailing list