Re: Web Pen Test Honeypot

["Jeff Robertson" <jeff.robertson () gmail com>]

Surely you mean WebGoat?

On Fri, Jul 11, 2008 at 9:13 AM, Thanasis Kostopoulos
<a.kostopoulos () gmail com> wrote:
> OWASPs WebScarab
>
> On Tue, Jul 8, 2008 at 11:39 PM, John Evans <admin () kilnar com> wrote:
> > Greetings,
> >
> > I am in the middle of evaluating the wide variety of web security
> > pen-test tools that exist. I'm currently pointing each piece of software
> > to a site that I have written. None of the tools are finding issues.
> >
> > My task right now is to find the right tool for the job, and the job is
> > finding web-based security issues. Either the tools are not working, or
> > my site is secure. I'm not willing to put money on which of the two is
> > true. :)
> >
> > What I need is a web application that has known security issues. I would
> > prefer one that was intentionally written to have scanners pointed to it
> > for testing the scanners.
> >
> > Does such a thing exist? I hope so, because I hardly have time right now
> > to write even the simplest web application that has all of the various
> > holes that I need to test for.
> >
> > If someone could point me to a "web honeypot" that I could install in my
> > own environment I would appreciate it.
> >
> > Thanks.
> >
> >
> > --
> > John Evans
> > Administrator of kilnar.com
> >
> > -------------------------------------------------------------------------
> > Sponsored by: Watchfire Methodologies & Tools for Web Application Security
> > Assessment With the rapid rise in the number and types of security threats,
> > web application security assessments should be considered a crucial phase in
> > the development of any web application. What methodology should be followed?
> > What tools can accelerate the assessment process? Download this Whitepaper
> > today!
> > https://www.watchfire.com/securearea/whitepapers.aspx?id=70170000000940F
> > -------------------------------------------------------------------------
>
> -------------------------------------------------------------------------
> Sponsored by: Watchfire
> Methodologies & Tools for Web Application Security Assessment
> With the rapid rise in the number and types of security threats, web application security assessments should be 
> considered a crucial phase in the development of any web application. What methodology should be followed? What tools 
> can accelerate the assessment process? Download this Whitepaper today!
>
> https://www.watchfire.com/securearea/whitepapers.aspx?id=70170000000940F
> -------------------------------------------------------------------------

-------------------------------------------------------------------------
Sponsored by: Watchfire 
Methodologies & Tools for Web Application Security Assessment 
With the rapid rise in the number and types of security threats, web application security assessments should be 
considered a crucial phase in the development of any web application. What methodology should be followed? What tools 
can accelerate the assessment process? Download this Whitepaper today! 

https://www.watchfire.com/securearea/whitepapers.aspx?id=70170000000940F
-------------------------------------------------------------------------