OWASP Bangalore : OWTF demo : 13 Dec 2014
3 likes4,655 views
The document outlines the OWTF (Offensive Web Testing Framework), an automated penetration testing tool designed to organize findings according to various security standards. Developed in Python, it supports Kali Linux and integrates multiple tools for task execution and result aggregation. It provides resources for setup, contributions, and demo access, as well as links for further exploration.
OWASP Bangalore : OWTF demo : 13 Dec 2014
- 1. OWASP OWTF Anant Shrivastava
- 2. OWTF
- 3. O.W.T.F.
- 4. Offensive Web Testing Framework
- 5. Who am i Anant Shrivastava Information Security Consultant OWASP + G4H + null http://anantshri.info @anantshri
- 6. Agenda What is OWTF OWTF Demo Things not covered How to Contribute
- 7. Offensive Web Testing Framework
- 8. Need of W.T.F. Automated Pentest operations Organize finding as per standard standard could be OWASP, NIST or others custom notes and rankings identify type of execution Passive, active
- 9. History We started out as a way to run OWASP test's without accessing the website directly i.e. via indirect / passive ways. Written in Python by Abraham (@7a_) One of the most active OWASP projects alongside (ZAP and TestingGuide)
- 10. U. S. P. Automated task execution Single Dashboard result aggregation (in future co-relation) Raw tools output available Single point dashboard for all data. Control Task's : Pause and resume.
- 11. HOW
- 12. But its primarily a DEMO
- 13. So lets Launch the demo parts first.
- 14. Project hosted at http://github.com/owtf/owtf
- 15. Officially supports KALI LINUX & Samurai WTF
- 16. Demo Setup 1. Kali Machine with OWTF configured on it 2. scan : http://demo.testfire.net 3. scan : http://testasp.vulnweb.com
- 17. Basic setup git clone http://github.com/owtf/owtf.git cd owtf python2 install/install.py
- 18. DEMO
- 19. Development
- 20. Not covered OWTF botnetmode OWTF inbuilt proxy OWTF PlugnHack support OWTF Waf Bypasser and other plugins
- 21. contribute? GSoC Winter of Code Just Code Issue tracker comments on Github page.
- 22. Useful links 1. http://owtf.org 2. http://github.com/owtf/owtf 3. Video Demos @ youtube (owtfproject) 4. http://bit.ly/owtf-demo-lionheart
- 23. Social Connect Twitter: @owtfp Freenode IRC : #owtf
- 24. Any Questions?
- 25. slide credits Not all slides were mine. credits to @tunnelshade_ and @7a_ for some slides.
- 26. Thank You