Main Page

From

Welcome to OWASP O2 Platform's website. The O2 platform represents a new paradigm for how to perform, document and distribute Web Application security reviews. O2 is designed to Automate Security Consultants Knowledge and Workflows and to Allow non-security experts to access and consume Security Knowledge.

This is an independent website dedicated to the OWASP O2 Platform. The content is independently created and maintained by O2's main developer Dinis Cruz.

The OWASP O2 Platform is an OWASP project and a sister website (currently a bit out-of-data) can be found at the O2 Section of the OWASP website (note that OWASP does not endorse nor subscribe to the content presented in this http://www.o2platform.com website)

Download (TRY O2)

Latest Release: 10th July 2010 - v1.2 Beta: See screenshots here

Windows installer: (OWASP O2 Platform (v1.2 Beta).msi ) for the OWASP O2 platform version 1.2 Beta (released on 10th July 2010)

Web Installer (development version):Latest version (in active development) and available for downloads via .Net's ClickOnce [http://o2platform.googlecode.com/svn/O2_ClickOnce_Installers/O2_XRules_Database

'Requirements:: Windows and .NET Framework 3.5 SP1

Source code: The source code for the O2 Platform is availabled for download via SVN at https://code.google.com/p/o2platform/source/checkout

Documentation

In addition to the Wiki pages below, there are a number of Videos that show the mulitple O2 modules and scripts in action.

• Help
  • Installing O2 (using .NET ClickOnce)
  • XRules Database - Taking Screenshots
• O2 AST .NET Scanner
  • O2 .NET AST Scanner - HacmeBank - SQL Injection PoC
  • O2 .NET AST Scanner - HacmeBank Example
  • O2 Ast CodeScanner - Creating Method Streams
  • O2 .NET AST Engine/Call Graph Script Examples
• Web
  • O2 Script/API GMail.cs (with video) - Using WatiN to create a GMail account|
  • O2 Script - Quick HtmlCode Viewer
  • O2 Script - Quick HtmlCode Viewer - Version 2
  • O2 Script/View Details of current Internet Explorer instances
  • O2_Scripts/WatiN/Open_page_and_show_html_elements_in_new_window
  • Script Library/Web Examples
• APIs
  • WatiN - Web Automation API (with video)
  • O2 API/Blogger API (writing a new blog post) (with video)
  • O2 API/BT Open Zone (with video)
  • O2 API/Google Maps/Save large map as JPG (just script)
  • O2 Script/Removing Spam pages from OWASP website (28 Jun 2010)
  • O2 API/Amazon S3
• DotNet
  • Languages and Frameworks/DotNet/Convert_VBNet_Into_CSharp_and_CSharp_into_VBNet
  • ViewState Decoder ASP.NET 2.0
• Vulnerable Apps
  • WebGoat/First Example of O2 WebGoat API
• O2 misc
  • O2 Script/Ask user for security credentials (Username and Password)
  • Script Library/Wiki Examples
  • O2 Scripts - Code Samples
  • O2 Script/Running Unit Tests

• O2 development
  • O2 Script/Compiling all O2 Scripts (with results in DataGridView)
  • Requested API changes/27-May-2010
  • Requested API changes/30-May-2010
  • O2 Development/Using an O2 Script to check the O2 Scripts
  • O2 Scripting Environment/Features/File:Ref

'Try O2' website

O2 needs a vibrant community around and for that a powerful 'social web engine' is needed.

The first attempt at creating this environment is now at http://try-o2.com and more details about how the multiple O2 websites should work together can be read on this blog post: try-o2.com, o2-platform.com and OWASP.org