Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
New OWASP .NET Project and WebGoat 3.0 Beta Released
From: Mark Curphey (markcurphey.com)
Date: Wed Jan 07 2004 - 14:44:56 CST
We are very pleased to announce a new collection of projects at OWASP focusing on ASP.NET. Lead by Dinis Cruz of DDPlus in the UK, the projects inherit ANSA, an ASP.NET security analyzer, ABS a classic ASP security analyzer as well as some papers and tools for testing the security of ASP.NET is shared hosting environments.
These projects originally started life at www.gotdotnet.com and have now moved to be the initial core of the OWASP.NET projects that we hope to grow pretty rapidly over the year. Dinis is actively looking for other .NET developers that can help him enhance the current code base and develop new projects such as a C# XSS tester and other ideas.
You can download ANSA Version 0.3 at Sourceforge using
Look for the other initial projects code and new project information online very soon. If you are interested in developing or have projects or code you wish to contribute (as always open source copyrighted to the FSF.
We are also very pleased to be able to release the Version 3.0 Beta of WebGoat. WebGoat is an interactive web application security training tool written by Aspect Security with lessons on topics like SQL Injection, XSS and so on. This version fixes many bugs, has a much nicer installer and a new feature called the ScoreCard. The Scorecard keeps track of whether you have turned on hints and how many times you had to attempt each exploit before you were successful. Itís a pretty reasonable benchmark to see how good you or your tools are! The final version is scheduled to be released in a week or so when we release the OWASP Top 10 for 2004. WebGoat version 3 has (or will have) lessons for each category in the Top Ten. Big thanks to Bruce Mayhew and Jeff Williams and Bill Hau for their hard work on this.
You can download OWASP WebGoat Verison 3.0 from Sourceforge