[Owasp-testing] spreadsheets for testing guide / top ten

daniel cuthbert daniel.cuthbert at owasp.org
Mon Dec 14 04:44:42 EST 2009


The XMl version is pretty good, what we'd need is something that wouldn't
require net access and could be easily archived with every test. As much as
I dislike Excel, it does tick the boxes (excuse the pun) when it comes to
testing apps and being thorough.



2009/12/14 Jonathan Cran <jcran at 0x0e.org>

> Cool, i'll check that out. In the meantime, here's a spreadsheet version of
> the 2010 Top10.
>
> http://www.0x0e.org/x/OWASP-Top10-2010.xls
>
> Cross-posting on the owasp-top10 list.
>
> jcran
>
> --
> Jonathan Cran
> jcran at 0x0e.org
> 515.890.0080
>
>
> On Sun, Dec 13, 2009 at 11:11 PM, Mike Boberski <mike.boberski at gmail.com>wrote:
>
>> Perhaps consider ASVS, there is an XML version you could use, see the
>> project page
>>
>> On 12/13/09, Jonathan Cran <jcran at 0x0e.org> wrote:
>> > A while back there was a thread discussing the need for a spreadsheet
>> > version of the testing guide (see;
>> > https://lists.owasp.org/pipermail/owasp-testing/2008-May/001540.html) .
>> i
>> > think the debate was mainly centered around whether or not an xls file
>> would
>> > be acceptable.
>> >
>> > I was wondering if anything like this had been published?
>> >
>> > I've created versions in the past. I think it definitely makes sense to
>> > offer this as a supplement to the OWASP testing guide (and top 10),
>> based on
>> > how many testers like to "check-off" portions of a test.
>> >
>> > Thoughts?
>> >
>> > jcran
>> >
>>
>>
>> --
>> Mike
>>
>
> _______________________________________________
> Owasp-testing mailing list
> Owasp-testing at lists.owasp.org
> https://lists.owasp.org/mailman/listinfo/owasp-testing
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/owasp-testing/attachments/20091214/357ca422/attachment.html 


More information about the Owasp-testing mailing list