newsWeb Application Security Project (W.A.S.P.) - News

 
 
Show details for the latest news.

Latest News Approved
Ready for production!
     posted by joseanpiti, Mon 04 Jul 2005 08:29:12 PM UTC

English:
---------------------------------------------------------------
The WASP project is ready for production uses. I'm using wasp in the development of the new Archivistic Management System for the "Sabino Arana Fundation - Historic Museum of the Basque Nacionalism". [...]

Version 0.0.8 Released
     posted by joseanpiti, Thu 06 Jan 2005 08:23:47 PM UTC

PHP_Sec part of the project WASP has been updated. The newest version is the 0.0.8.

A not detailed list of bug fixes (for more details read the ChangeLog) is the following:

  • Various bug fixes in php_crypt.php and php_sec.php, and also in other various script.
[...]
Honeypot updated
     posted by joseanpiti, Wed 10 Nov 2004 04:18:10 PM UTC

The Honeypot part of the PHP_Sec project has been updated.

    - Error messages to emulate Oracle, MySQL, Interbase/Firebird, Informix and MS SQL Servers has been addeds.

    - The error to show when an SQL Injection attack found can be randomly selected. [...]

Included a Honeypot... or a honeypage
     posted by joseanpiti, Mon 01 Nov 2004 11:56:24 AM UTC

In the latest version of WASP - PHP_Sec I has been added a very basic honeypot script written in php. This fires error messages depending on the attack launched. In example, this shows MySQL errors if detects an SQL Injection attack.


En la última versión de WASP - PHP_Sec he agregado un simple honeypot, escrito en php. Este script lanza [...]

New Beta 2 of Wasp for PHP
     posted by joseanpiti, Sat 09 Oct 2004 05:12:02 PM UTC

The source code stored in the CVS is the Beta 2 of Wasp for PHP. This code is very stable and may be used in almost any application PHP Application.

This version has the ability to check for HTTP Response splitting attacks as well the old attacks (such as XSS, SQL Injection, etc...). [...]

First Beta version of PHP_Sec
     posted by joseanpiti, Fri 01 Oct 2004 04:11:32 PM UTC

The first beta version of PHP_Sec is in the CVS repository. You can download the version 0.0.3 from the CVS repository.

This may be used without any problem in any php web application. No known conflicts with other PHP applications are found. [...]

Back to the top

Powered by Savane 3.13-4448.
Corresponding source code