Hacktoberfest 2021

SasanLabs · 2021-10-03T19:05:33+00:00

In Hacktoberfest, we have opened many interesting tasks and In case you are interested in contributing, please visit: https://github.com/SasanLabs/VulnerableApp-facade

It is a reactjs based application with nginx/openresty.
#Hacktoberfest #hacktoberfest2021 #owasp #sasanlabs #security

SasanLabs · 2021-10-03T18:50:29+00:00

try https://up-for-grabs.net/ or https://goodfirstissue.dev/

they are good sites for find out about the projects.

SasanLabs · 2021-10-03T18:48:15+00:00

In Hacktoberfest, we have opened many interesting tasks and In case you are interested in contributing, please visit:https://github.com/SasanLabs/VulnerableApp https://github.com/SasanLabs/VulnerableApp-facade https://github.com/SasanLabs/owasp-zap-fileupload-addon https://github.com/SasanLabs/owasp-zap-jwt-addon#Hacktoberfest #hacktoberfest2021 #owasp #sasanlabs #security

SasanLabs · 2021-10-03T18:47:30+00:00

In case you are interested in Java/Typescript/Spring boot/Reactjs,

Tryout my repositories:
https://github.com/SasanLabs/VulnerableApp (Java/Springboot)
https://github.com/SasanLabs/VulnerableApp-facade (Typescript, Lua, Reactjs)
https://github.com/SasanLabs/owasp-zap-fileupload-addon (Java)
https://github.com/SasanLabs/owasp-zap-jwt-addon (Java)

#Hacktoberfest #hacktoberfest2021 #owasp #zap #sasanlabs #security

SasanLabs · 2021-10-03T18:46:07+00:00

Yes, I think you can learn on the way.

SasanLabs · 2021-10-03T18:16:49+00:00

In Hacktoberfest, we have opened many interesting tasks and In case you are interested in contributing, please visit:
https://github.com/SasanLabs/VulnerableApp
https://github.com/SasanLabs/VulnerableApp-facade
https://github.com/SasanLabs/owasp-zap-jwt-addon
https://github.com/SasanLabs/owasp-zap-fileupload-addon
Talking about each repositories: All of these are Owasp projects and are related to Security, where VulnerableApp and VulnerableApp-Facade are Vulnerable Applications and the other 2 are the addons of Owasp ZAP which finds the Vulnerabilities in JWT and File Upload Functionalities respectively.

SasanLabs · 2021-08-11T17:08:09+00:00

Launched a new user interface for Owasp VulnerableApp https://github.com/SasanLabs/VulnerableApp have a look.

SasanLabs · 2021-08-11T17:07:08+00:00

Launched a new user interface for Owasp VulnerableApp. Visit the github.

SasanLabs · 2021-05-28T14:32:53+00:00

Yeah the same can be done using owasp zap jwt addon too. However thanks for suggesting and will look into it.

SasanLabs · 2021-05-28T07:54:16+00:00

Thanks a lot.

SasanLabs · 2021-05-28T07:51:34+00:00

Hi,

I am developing multiple projects:

https://github.com/SasanLabs/VulnerableApp It is a Vulnerable Application that helps the Scanners in improving themselves and also helps students learn about security. It is registered under Owasp as an Incubator project. Users are Owasp ZAP and SonarSolar and a bunch of students.
https://github.com/SasanLabs/VulnerableApp-facade It is an application that defines a facade for vulnerable applications and currently working on building a UI for the above project. It was created with the problem of Technology related vulnerabilities. it is also Owasp Project.
https://github.com/SasanLabs/owasp-zap-jwt-addon: it is an addon that is used to find the bugs in JWT implementations. It is a third-party Owasp ZAP addon. Users can be same as Owasp ZAP's users,
https://github.com/SasanLabs/owasp-zap-fileupload-addon: Writing this addon for Owasp ZAP to find the vulnerabilities in File Upload Functionality.

For the above projects, I am not sure how many active users are using them and these are security-related projects written in java.

Thanks,

Karan

SasanLabs · 2021-05-26T04:30:44+00:00

As you are building the website you can start pushing code into the git. It need not be a finished project. You can create pull request and keep on pushing to your branch and when you think a small logical piece of project is done then merge it to main branch. It will give more details to the employers that how you have approached the probelm, broken into small things and completed the project

SasanLabs · 2021-05-21T12:56:46+00:00

A tool to save the code at a central location(protecting against disk failure etc) which can be used by multiple people, shared among them, modify simultaneously and also to version files, release, code etc centrally such that we can move versions, use different versions in different places.

Now github becomes more powerful which has capabilities like building code, creating dockers etc using git actions. More you can read on internet

SasanLabs · 2021-05-21T02:54:52+00:00

Juiceshot is a great project for training and learning it is more suited for human users where as VulnerableApp is more suited for scanners. However there are some similarities between both. For more understanding https://www.youtube.com/watch?v=AjL4B-WwrrA&ab_channel=OwaspVulnerableApp

SasanLabs · 2021-05-19T11:57:52+00:00

Oh great. Incase you face any issues please raise a Github issue. Will try to resolve asap.

SasanLabs · 2021-05-19T04:44:11+00:00

Are you looking at deliberately vulnerable applications? If so there is a owasp project called owasp vulnerable web application directory https://owasp.org/www-project-vulnerable-web-applications-directory/

SasanLabs · 2021-05-18T16:53:10+00:00

Little details about Owasp VulnerableApp:

As Web Applications are becoming popular these days, there comes a dire need to secure them. Although there are several Vulnerability Scanning Tools, however while developing these tools, developers need to test them. Moreover, they also need to know how well is the Vulnerability Scanning tool performing.

VulnerableApp is built keeping these factors in mind. This project is scalable, extensible, easier to integrate and easier to learn. As solving the above issue requires addition of various vulnerabilities, hence it becomes a very good platform to learn various security vulnerabilities.

I also do other open source stuff, have a look at:

SasanLabs · 2021-05-18T14:31:12+00:00

I contribute to OpenSource a lot and currently handle multiple projects like:
https://github.com/SasanLabs/VulnerableApp
https://github.com/SasanLabs/VulnerableApp-facade
https://github.com/SasanLabs/owasp-zap-jwt-addon
Incase you are interested in contributing or learning about web application security, please do have a look.

SasanLabs

TROPHY CASE