Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Map OWASP SKF labs to WSTG examples #262

Open
1 task done
RiieCco opened this issue Jan 20, 2020 · 7 comments
Open
1 task done

Map OWASP SKF labs to WSTG examples #262

RiieCco opened this issue Jan 20, 2020 · 7 comments
Assignees
Labels
good first issue help wanted integration Involves mapping topics with other OWASP projects
Milestone

Comments

@RiieCco
Copy link
Contributor

RiieCco commented Jan 20, 2020

What would you like added?
OWASP SKF has a lot of different labs with write ups on "how to test".
We can reference these labs in parts of the testing guide

The Lab write up can be found here:
https://owasp-skf.gitbook.io/asvs-write-ups/

i.e the following lab:
https://owasp-skf.gitbook.io/asvs-write-ups/kbid-46-sqli-union-select

could be referenced somewhere here in the testing guide:
https://github.com/OWASP/wstg/blob/master/document/4_Web_Application_Security_Testing/4.8_Input_Validation_Testing/4.8.5_Testing_for_SQL_Injection_OTG-INPVAL-005.md

Would you like to be assigned to this issue?
Check the box if you will submit a PR to add the proposed content. Please read CONTRIBUTING.md.

  • Assign me, please!
@victoriadrake victoriadrake added the integration Involves mapping topics with other OWASP projects label Jan 22, 2020
@victoriadrake victoriadrake added this to the v5.0 Release milestone Jan 22, 2020
@github-actions
Copy link

Please comment if you are still working on this issue, as it has been inactive for 30 days. To give everyone a chance to contribute, we are releasing it to new contributors.

@Hsiang-Chih
Copy link
Contributor

@kingthorin
Copy link
Collaborator

That was just one example, the ticket is open to attach them everywhere they are applicable.

We also need to decide how/where it should be done.

  • ID table?
  • Reference list?
  • Some new construct?

@ThunderSon
Copy link
Collaborator

SKF mapping will not happen as such.
SKF guides will be merged into WSTG, and referenced from SKF. SKF is a KB.
@RiieCco Would you like that @Hsiang-Chih give a hand? :)

@github-actions
Copy link

Please comment if you are still working on this issue, as it has been inactive for 30 days. To give everyone a chance to contribute, we are releasing it to new contributors.

@github-actions
Copy link

Please comment if you are still working on this issue, as it has been inactive for 30 days. To give everyone a chance to contribute, we are releasing it to new contributors.

@kingthorin kingthorin added the HacktoberFest Issues which are good candidates for HacktoberFest: https://hacktoberfest.digitalocean label Oct 1, 2021
@kingthorin kingthorin removed the HacktoberFest Issues which are good candidates for HacktoberFest: https://hacktoberfest.digitalocean label Nov 4, 2021
@github-actions
Copy link

Please comment if you are still working on this issue, as it has been inactive for 90 days. To give everyone a chance to contribute, we are releasing it to new contributors.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
good first issue help wanted integration Involves mapping topics with other OWASP projects
Projects
None yet
Development

No branches or pull requests

5 participants