Web Application Security Project (W.A.S.P.) - News
posted by joseanpiti, Mon 04 Jul 2005 08:29:12 PM UTC
English:
---------------------------------------------------------------
The WASP project is ready for production uses. I'm using wasp in the development of the new Archivistic Management System for the "Sabino Arana Fundation - Historic Museum of the Basque Nacionalism".
[...]
posted by joseanpiti, Thu 06 Jan 2005 08:23:47 PM UTC
PHP_Sec part of the project WASP has been updated. The newest version is the 0.0.8.
A not detailed list of bug fixes (for more details read the ChangeLog) is the following:
- Various bug fixes in php_crypt.php and php_sec.php, and also in other various script.
posted by joseanpiti, Wed 10 Nov 2004 04:18:10 PM UTC
The Honeypot part of the PHP_Sec project has been updated.
- Error messages to emulate Oracle, MySQL, Interbase/Firebird, Informix and MS SQL Servers has been addeds.
- The error to show when an SQL Injection attack found can be randomly selected.
[...]
posted by joseanpiti, Mon 01 Nov 2004 11:56:24 AM UTC
In the latest version of WASP - PHP_Sec I has been added a very basic honeypot script written in php. This fires error messages depending on the attack launched. In example, this shows MySQL errors if detects an SQL Injection attack.
En la última versión de WASP - PHP_Sec he agregado un simple honeypot, escrito en php. Este script lanza
[...]
posted by joseanpiti, Sat 09 Oct 2004 05:12:02 PM UTC
The source code stored in the CVS is the Beta 2 of Wasp for PHP. This code is very stable and may be used in almost any application PHP Application.
This version has the ability to check for HTTP Response splitting attacks as well the old attacks (such as XSS, SQL Injection, etc...).
[...]
posted by joseanpiti, Fri 01 Oct 2004 04:11:32 PM UTC
The first beta version of PHP_Sec is in the CVS repository. You can download the version 0.0.3 from the CVS repository.
This may be used without any problem in any php web application. No known conflicts with other PHP applications are found.
[...]
Powered by Savane 3.14-8aba.
Corresponding source code