2
edits
Security/Mentorships/MWoS/2014/OWASP ZAP Scripted Add-ons: Difference between revisions
Security/Mentorships/MWoS/2014/OWASP ZAP Scripted Add-ons (view source)
Revision as of 15:42, 28 December 2014
, 28 December 2014→Updates
(Created page with "== Team == === Introduction === === Members === * TBA * Professor: TBA * Mozilla Advisor: [https://mozillians.org/en-US/u/psiinon/ Simon Bennetts] == Project == === Descripti...") |
|||
| (10 intermediate revisions by 3 users not shown) | |||
| Line 1: | Line 1: | ||
[[File:WinterOfSecurity_logo_light_horizontal.png|right|500px]] | |||
== Team == | == Team == | ||
=== Introduction === | === Introduction === | ||
Hailing from New Delhi,India; this team of four girls believes in the 3Ps of success. '''Patience,Passion and Perseverance.''' | |||
=== Members === | === Members === | ||
* | * Sarah Khan | ||
* Professor: | * Sultana Mumtaz | ||
* Farheen Nilofer | |||
* Sarah Masud | |||
* Professor: Dr. Tanvir Ahmad | |||
* Mozilla Advisor: [https://mozillians.org/en-US/u/psiinon/ Simon Bennetts] | * Mozilla Advisor: [https://mozillians.org/en-US/u/psiinon/ Simon Bennetts] | ||
== Project == | == Project == | ||
=== Description === | === Description === | ||
ZAP supports all JSR223 scripting languages, but only for a limited number of purposes. This development would allow 'full add ons ' to be written in any JSR223 languages. | |||
=== Scope === | === Scope === | ||
=== Success Criteria === | === Success Criteria === | ||
| Line 14: | Line 22: | ||
* Team presentation | * Team presentation | ||
* Project introduction: OWASP ZAP: Scripted Add-ons | * Project introduction: OWASP ZAP: Scripted Add-ons | ||
* Set deadline: | * Set deadline: 18/1/2015 | ||
* Schedule meetings: | * Schedule meetings:26/08/2014 | ||
* Plan for the next week: | * Plan for the next week: | ||
=== < | === <14.08.2014> === | ||
* current work | * current work | ||
Brushing up java skills | |||
Trying to work and understand script add on already present in ZAP | |||
* blocking points | * blocking points | ||
* discussion points | * discussion points | ||
* upcoming work | * upcoming work | ||
Compile and run a simple add on which would form the base of ZAP add on extension. | |||
Study the area of source code implementing script add on. | |||
Run Bodge It and test various kinds of vulnerabilities through ZAP. | |||
=== <28.12.2014> === | |||
*We successfully wrote a javascript for adding a menu item through the scripting console of java with the help of our mentor. | |||
*Now, our main aim is to make permanent the changes which we bring through writing scripts on script console. For that we would try to gain access to an object of ExtensionHook and try to make changes though that object | |||
=== <28.12.2014> === | |||
*We are trying to write javascript to add a menu item to the console which we would then try to pass through | |||
AddOnLoader and ExtensionHook so that the menu item added need not be again and again entered through scripting . | |||
*We are working on summarizing the needed classes. | |||