Hello everyone,

Iran OWASP Chapter restarted. Please Share our channel link. https://telegram.me/irOWASP

Thank you.

Our mailing list:

https://lists.owasp.org/mailman/listinfo/owasp-iran
[email protected]

Feel free to join discussions or start one!

Contact:

Contact Chapter Leaders Directly

[email protected]
[email protected]

سلام به همگی،

بخش OWASP ایران دوباره راه اندازی شد، لطفا لینک کانال ما را به اشتراک بگذارید .
https://telegram.me/irOWASP
متشکرم.

لیست پست الکترونیک ما:

https://lists.owasp.org/mailman/listinfo/owasp-iran
[email protected]
لطفا به ما بپیوندید

تماس:
تماس مستقیم با مدیران
[email protected]
[email protected]

Google Summer of Code 2016

Google is now accepting applications for mentoring organizations for GSoC 2016! We are looking for your project ideas and making the initiative a success!

For those of you that have participated in the program, this is the time of the year to start outlining your ideas for projects here:

https://www.owasp.org/index.php/GSOC2016_Ideas

Deadline is Approaching February 19th [Tomorrow]

any question or help? contact me directly [email protected]

Bug Hunting in OWASP

Volunteering to secure OWASP assets and web applications.
For anyone who wants to help OWASP
https://www.owasp.org/index.php/Help_Secure_Owasp_assests
Set your name if you have editing rights to the wiki
Otherwise contact me, I'll gladly set your name on the list.

OWASP Zed Attack Proxy Project

The OWASP Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.
It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing.
ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually.

https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project
https://github.com/zaproxy/zaproxy/
https://github.com/zaproxy/zap-extensions/

OWASP ZSC Tool Project

What is OWASP ZSC ?

OWASP ZSC is an open source software in python language which lets you generate customized shellcodes and convert scripts to an obfuscated script. This software can be run on Windows/Linux/OSX under python.

OWASP Page: https://www.owasp.org/index.php/OWASP_ZSC_Tool_Project
Documents: https://www.gitbook.com/book/ali-razmjoo/owasp-zsc/details
Home: https://zsc.z3r0d4y.com/
Features: https://zsc.z3r0d4y.com/table.html
Github: https://github.com/Ali-Razmjoo/OWASP-ZSC
Archive: https://github.com/Ali-Razmjoo/ZCR-Shellcoder-Archive
Mailing List: https://groups.google.com/d/forum/owasp-zsc
API: https://api.z3r0d4y.com

@irOWASP

OWASP Application Security Verification Standard Project

What is ASVS?

The OWASP Application Security Verification Standard (ASVS) Project provides a basis for testing web application technical security controls and also provides developers with a list of requirements for secure development.

@irOWASP

https://www.owasp.org/index.php/Category:OWASP_Application_Security_Verification_Standard_Project

Press Release by Johanna Curiel

Lessons from the cyber underworld: How to understand software vulnerabilities and exploits like a professional hacker with OWASP ZSC Tool

https://www.linkedin.com/pulse/lessons-from-cyber-underworld-how-understand-software-johanna-curiel?trk=hb_ntf_MEGAPHONE_ARTICLE_POST

@irOWASP

OWASP Foundation | February 2016 Connector

https://hosted-p0.vresp.com/1479611/243e672b0e/ARCHIVE

OWASP WASC Distributed Web Honeypots Project
The goal of the OWASP WASC Distributed Web Honeypots Project is to identify emerging attacks against web applications and report them to the community including automated scanning activity, probes, as well as, targeted attacks against specific web apps.

Introduction
The goal of the Distributed Web Honeypot (DWH) Project is to identify emerging attacks against web applications and report them to the community. This may include automated scanning activity, probes, as well as, targeted attacks against specific web sites or applications. The scope of this project has recently been expanded to include deployment of both standard web application honeypots and/or open proxy honeypots. Project participants may choose whether they want to run their honeypot as an open proxy or a stand-alone sensor.

Description
This project fills a need in the web application Defender's community to have detailed data about mass web application scanning attacks such as those being operated by Botnets. This project will provide detailed data about attacks and their origins.


https://www.owasp.org/index.php/OWASP_WASC_Distributed_Web_Honeypots_Project

نسخه ۴ نشریه آفسک منتشر شد.
https://offsec.ir

Brian Beaudry ([email protected]) has been choosen by google (GSoC 2016) as mentor to develop windows shellcodes for owasp zsc project (https://github.com/Ali-Razmjoo/OWASP-ZSC)