Sunday, January 28, 2024

OWASP Web 2.0 Project Update

Some of you likely recall the talk back in 2016 or so of updating the OWASP Foundation website to not appear so much like a...well, a wiki.  That talk was carried forward into 2017 and 2018 and, with each year, the proposal got pushed ahead as there were other, deeper projects to tackle.  With the arrival of 2019 and a firm project plan under the guidance of Mike McCamon, Executive Director, we are finally moving toward a functioning, modern website that will be a whole lot less...wiki-like.  The journey has been circuitous and, while we are not anywhere near complete, we have a set plan in place to bring it to fruition within the calendar year (second quarter of the year, actually).

TLDR: How Can You Help? 

There are certainly ways in which you can get involved now.  For instance, we are looking for a clean way to get wiki pages into GitHub markdown format for archival.  I have done some work here but there are parsing issues with some of the tools.  Do you know a good tool or have you done similar work?  Also, are you or do you know a good designer, someone familiar with GitHub pages that can provide some useful help and feedback along the way?  A Jekyll expert to help code a theme with a handful of templates would be a great addition.  In addition, we could use website server admins who could help with assigning redirects to maintain search integrity.  Finally, there will be a great many pages to move that we will also eventually need community involvement in.  

So, What Have We Done? 

Thus far we have researched various ideas for standing up a new site, including modifying the current wiki, spinning up our own web server, contracting a third party to host and build a new site, and also using existing infrastructure with our own content to launch a new face for OWASP.  Our discussions led us to a familiar place, one that nearly every developer in the OWASP space is familiar with: GitHub.   

In our conversations with GitHub, it became readily apparent that using the platform would be a win for the Foundation as well as GitHub.  Nearly everyone who runs a project at OWASP (documentation or otherwise) uses GitHub.  Because our target audience is also mostly developers we know that they are also very comfortable with the platform.  And while GitHub has a number of high profile companies using their GitHub Pages, the use of the platform as the basis for the entire website of the number one non-profit foundation in the application security sector is a big draw.

We have run with that GitHub Pages idea and have spent internal manpower on a proof of concept.  This proof of concept is less about the UX of the site than the functionality, the ability to utilize the authentication systems, and the ability to utilize automation to push out changes quickly.

Where Are We Now?

We are doing the final stages of website architecture. We are also planning what needs to be in the site, how the pieces will integrate with current projects and chapters, and how we might utilize the community to integrate the pieces so that we have a visually and functionally cohesive website that spans across multiple repositories.

What Is Next?

We will soon be looking for a modern website design that is responsive and clean.  We will begin using the knowledge gained from our proof of concept to build out the internals of the website and then we will start implementing the highest traffic pages and administrative areas into the new platform.  Once we have the big-ticket items moved we will start looking at what is left and moving over those pieces.  The eventual goal would be to have a new, modern website for the future of OWASP while keeping the wiki as an archive of really useful information.


We hope you are as excited as we are about the future of the OWASP Foundation website and will join us as we move toward a modern web presence.  If you have any questions or would like to volunteer your time, experience or knowledge, please contact me at harold.blankenship@owasp.com

Continue reading

  1. Free Pentest Tools For Windows
  2. Hack Tools
  3. Pentest Tools Website
  4. Easy Hack Tools
  5. Usb Pentest Tools
  6. Hacking Tools And Software
  7. Hacking Tools For Windows Free Download
  8. Hacker Security Tools
  9. Hack Tool Apk
  10. Pentest Tools Subdomain
  11. Best Hacking Tools 2020
  12. Hacking Tools Windows 10
  13. Hacker Tools Apk Download
  14. Best Hacking Tools 2019
  15. Pentest Tools For Android
  16. New Hacker Tools
  17. Hak5 Tools
  18. Hack Tools Github
  19. Pentest Tools Alternative
  20. Github Hacking Tools
  21. Nsa Hack Tools
  22. Hacking Tools For Windows 7
  23. Hack App
  24. Hacking Tools Github
  25. Hacker Techniques Tools And Incident Handling
  26. Nsa Hacker Tools
  27. Pentest Tools Free
  28. Best Hacking Tools 2019
  29. Nsa Hack Tools
  30. Pentest Tools For Mac
  31. Hack App
  32. Hack Tool Apk
  33. Pentest Tools Subdomain
  34. Hack Tools For Ubuntu
  35. Hacking Tools For Mac
  36. Hacking Tools For Windows
  37. How To Install Pentest Tools In Ubuntu
  38. Pentest Tools Windows
  39. Tools Used For Hacking
  40. Hacker Tools Apk
  41. Tools 4 Hack
  42. Hacking Tools For Games
  43. Hacker Tools 2019
  44. Hackers Toolbox
  45. Pentest Tools Review
  46. Hak5 Tools
  47. Pentest Tools For Android
  48. Pentest Tools For Android
  49. Pentest Reporting Tools
  50. What Are Hacking Tools
  51. Ethical Hacker Tools
  52. Hacking Tools 2020
  53. Hacking Tools Hardware
  54. What Is Hacking Tools
  55. Pentest Tools Online
  56. Pentest Tools Github
  57. Hacker Tools For Mac
  58. Termux Hacking Tools 2019
  59. Hacking Tools Hardware
  60. Hacking Tools Name
  61. Github Hacking Tools
  62. Hacker Security Tools
  63. Hack Tools
  64. Hacking Tools For Beginners
  65. Hackrf Tools
  66. Hackers Toolbox
  67. Hack Tools 2019
  68. Hacker Security Tools
  69. Tools Used For Hacking
  70. Free Pentest Tools For Windows
  71. World No 1 Hacker Software
  72. Hacking Tools Github
  73. Hacking Tools Mac
  74. Hacker Tools 2019
  75. Hacker
  76. Pentest Tools For Windows
  77. Pentest Tools Find Subdomains
  78. Nsa Hack Tools Download
  79. Best Pentesting Tools 2018
  80. Pentest Tools
  81. Hack Tools For Games
  82. Hacking Tools For Mac
  83. New Hacker Tools
  84. Hacker Tools Apk Download
  85. Pentest Recon Tools
  86. Hacking Tools For Windows Free Download
  87. Pentest Tools Nmap
  88. Hack Website Online Tool
  89. Pentest Tools Find Subdomains
  90. Hacking Tools For Windows 7
  91. Hacker Tools Free Download
  92. Pentest Tools Online
  93. Pentest Tools Tcp Port Scanner
  94. Hacking App
  95. Hacker Tools Github
  96. New Hacker Tools
  97. Hacking Tools Github
  98. Hack Rom Tools
  99. Pentest Automation Tools
  100. Install Pentest Tools Ubuntu

No comments:

Post a Comment