OWTF 1.0 “Lionheart”: Call for testers + GSoC Poll

Call for testers OWTF 1.0 “Lionheart” is inminent, PLEASE help us: 1) Testing the bleeding edge branch here: https://github.com/owtf/owtf/tree/lions_2014 2) Reporting bugs here: https://github.com/owtf/owtf/issues  -other options: tutorials, demos, documentation, ideas, suggestions, bug fixes and any other form of contribution you can think of :)- How to get started: Intro: http://owtf.github.io/ Usage Documentation: http://docs.owtf.org/   Tutorials / Demos / …

XXE Exposed Webinar Recording and Slides

In case someone is interested, I had the pleasure of giving a Webinar for eLearnSecurity on Tuesday this week: Webinar Title: “XXE Exposed” Summary: Brief coverage of Web Service Types, SQLi and XSS against Web Services to then talk about XXE and XEE attacks and mitigation.Heavily inspired on the “Practical Web Defense” (PWD) style of pwnage + …

OWASP GSoC: call for mentors/co-mentors plz RT!

OWASP received 88 proposals this year, but needs 50+ more mentors or some amazing students will be lost this year in the GSoC 2014, please don’t let this happen, here is what you can do: Case 1) Mentoring for OWASP projects that are not OWTF If you are interested in mentoring/co-mentoring OWASP projects that are …