Skip to content
Merged
Changes from 1 commit
Commits
Show all changes
26 commits
Select commit Hold shift + click to select a range
ec77791
Merge pull request #83 from jie-lin/master
davewichers Sep 19, 2019
7920417
Add scorecard generation support for LGTM SAST.
davewichers Sep 22, 2019
be03bd1
Merge branch 'master' of https://github.com/OWASP/benchmark
davewichers Sep 22, 2019
2b6d779
Minor tweak to README
davewichers Oct 12, 2019
07ba24b
Add KiuwanReader.java and integrate with BenchmarkScore.java
davewichers Nov 2, 2019
0f9ffeb
fix kiuwan reader
mcprol Nov 10, 2019
36f6646
Enhance buildDockerImage script so it pulls ubuntu:latest every time …
davewichers Nov 11, 2019
1d47fd1
Enable the last 2 lines of the script, which I commented out for
davewichers Nov 11, 2019
34bddfd
Update HCLReader.java
Nov 13, 2019
ef29183
Added Checkmrax JSON parser
pnpo Nov 17, 2019
f4c7303
read analysis metadata from threadfix report
mcprol Nov 18, 2019
dc264e7
Merge pull request #85 from mcprol/master
davewichers Nov 18, 2019
5d073fb
Merge pull request #84 from Guluis/master
davewichers Nov 18, 2019
8bfc658
Completed processing of Checkmarx JSON files
pnpo Nov 23, 2019
4957c63
Merge pull request #86 from pnpo/master
davewichers Nov 23, 2019
d2a3ae1
Use CWE in findings list report instead of problem type mapping
jankuehl Dec 3, 2019
dd34136
Use problem type <-> CWE number mapping for older reports
jankuehl Dec 3, 2019
a53ec0a
Merge pull request #87 from RIGS-IT/xanitizer
davewichers Dec 3, 2019
453bc2e
Minor formatting improvements to BenchmarkScore.java
davewichers Dec 6, 2019
330794d
Update VeracodeReader.java
tjarrettveracode Dec 18, 2019
cfa5472
Update VeracodeReader.java
davewichers Dec 26, 2019
fd0a7ee
Merge pull request #89 from tjarrettveracode/master
davewichers Dec 26, 2019
c5cc852
Slight tweak to Dockerfile
davewichers Dec 27, 2019
8c33bae
Merge branch 'master' of https://github.com/OWASP/benchmark
davewichers Dec 27, 2019
f1f0256
Corrected issue with CWE parsing
cx-nuno-oliveira Jan 7, 2020
4d7c7ba
Merge pull request #91 from pnpo/master
davewichers Jan 10, 2020
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Minor tweak to README
  • Loading branch information
davewichers committed Oct 12, 2019
commit 2b6d779763ebf1e6e3e51014094db1d1df29f179
3 changes: 2 additions & 1 deletion README.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,7 @@
# OWASP Benchmark
The OWASP Benchmark Project is a Java test suite designed to verify the speed and accuracy of vulnerability detection tools. The initial version is intended to support Static Analysis Security Testing Tools (SAST). A future release will support Dynamic Analysis Security Testing Tools (DAST), like <a href="https://www.owasp.org/index.php/ZAP">OWASP ZAP</a>, and Interactive Analysis Security Testing Tools (IAST). The goal is that this test application is fully runnable and all the vulnerabilities are actually exploitable so its a fair test for any kind of application vulnerability detection tool.
The OWASP Benchmark Project is a Java test suite designed to verify the speed and accuracy of vulnerability detection tools. It is a fully runnable open source web application that can be analyzed by any type of Application Security Testing (AST) tool, including SAST, DAST (like <a href="https://www.owasp.org/index.php/ZAP">OWASP ZAP</a>), and IAST tools. The intent is that all the vulnerabilities deliberately included in and scored by the Benchmark are actually exploitable so its a fair test for any kind of application vulnerability detection tool. The Benchmark also includes scorecard generators for numerous open source and commercial AST tools, and the set of supported tools is growing all the time.

The project documentation is all on the OWASP site at the <a href="https://www.owasp.org/index.php/Benchmark">OWASP Benchmark</a> project pages. Please refer to that site for all the project details.

The current latest release is v1.2. Note that all the releases that are available here: https://github.com/OWASP/Benchmark/releases, are historical. The latest release is always available live by simply cloning or pulling the head of this repository (i.e., git pull).