Wednesday, May 6, 2020

October 2019 Connector

OWASP
Connector
October 2019

COMMUNICATIONS


Letter from the Vice Chairman of the Board

Dear OWASP Community,  

Two of the primary initiatives the foundation staff has been working on over the past few months were the two back to back Global AppSec Events in DC and Amsterdam.  This was a huge undertaking by everyone involved.  We are pleased to announce that the survey feed back is positive and both events were well attended.  I was in attendance of Global AppSec Amsterdam and it was great meeting and speaking with old friends and meeting new ones.  I would also like to take this opportunity, on behalf of the board to thank OWASP staff for their efforts in making the two conferences so successful. 

To continuing on with the events theme; I'm really happy to announce the locations of our 2020 OWASP Global AppSec Conferences.  The first one will be June 15 - 19, 2020 in Dublin and the second will be October 19 - 23, 2020 in San Francisco.  Dublin is not an exotic trip for me, more of a 10 minute tram ride.  Hopefully you will join us, while also making the most of the culture and scenery that Ireland has to offer.   

Last but not least, the OWASP Global Board of Directors election results where released Thursday October 17, 2019. I'd like to first thank everyone who has put their trust in me by voting me back onto the board for the next two years. I hope I do you justice.

I would also like to thank the large number of candidates that were willing to give of their personal time and run to be part of the Global OWASP Board.  This is a testament of the dedication and commitment of our members to continue to grow and evolve to the next level as an organization.  I encourage those that were not elected will still be involved in making a positive change by volunteering to be part of a committee.  The board and staff need all the help they can get to push through change. I hope you will join us in this journey.  We can not be successful without the help of the community. 

Until next time, 
Owen Pendlebury 
Vice Chairman, OWASP Global Board of Directors 
OWASP Global Board Election Results 
 
The newly elected 2020 OWASP Board Members:
Grant Ongers
Owen Pendlebury
Sherif Mansour
Vandana Verma Sengal
 
Congratulations, and thank you to all the candidates that participated and the OWASP members that voted. 
OWASP Foundation Global AppSec Event Dates for 2020

Global AppSec Dublin, June 15 - 19, 2020

Global AppSec San Francisco, October 19 - 23, 2020



Visit our website for future announcements.

EVENTS 

You may also be interested in one of our other affiliated events:


REGIONAL EVENTS
Event DateLocation
BASC 2019 (Boston Application Security Conference) October 19,2019 Burlington, MA
LASCON X October 24 - 25, 2019 Austin, TX
OWASP AppSec Day 2019 Oct 30 - Nov 1, 2019 Melbourne, Australia
German OWASP Day 2019 December 9 - 10, 2019 Karlsruhe, Germany
AppSec California 2020 January 21 - 24, 2020 Santa Monica, CA
OWASP New Zealand Day 2020 February 20 - 21, 2020 Auckland, New Zealand
Seasides 2020 March 3 - 5, 2020 Panjim Goa, India
SnowFROC 2020 March 5, 2020 Denver, CO

GLOBAL PARTNERSHIP EVENTS
Event Date Location
BlackHat Europe 2019 December 2 - 5, 2019 London


BlackHat Europe 2019 London at EXCEL London
2019 December 2-5 
Visit the OWASP Booth 1015
Business Hall December 4 & 5 
December 4, 10:30 AM - 7:00 PM
December 5: 10:00 AM - 4:00 PM

OWASP Members are eligible for € 200.00 discount , email marketing@owasp.org for code to use when registering.

PROJECTS

Projects were well-represented at the previous two Global AppSec conferences in DC and Amsterdam this past month.  Both events featured the popular Project Showcase and I heartily thank the leaders of the projects who participated:

Secure Medical Device Deployment Standard
Secure Coding Dojo
API Security Project
Dependency Check
SAMM
SEDATED
DefectDojo
Juice Shop
ModSecuity Core Rule Set
SecurityRAT
WebGoat

These leaders put on a great set of presentations and, in many cases, the room was standing room only.  Thank you!

The project reviews that were done in DC and Amsterdam are still being evaluated and worked on; if you are waiting on answers, please have patience.  I hope to have them finalized by November.

The website migration continues moving forward.  The process of adding users to the proper repositories is an on-going effort.  If you have not given your GitHub username, please drop by the Request for Leader Github Usernames form.  A nice-to-accomplish goal would be to have the projects and chapters in their new website homes within the next 30 days.

Harold L. Blankenship
Director of Technology and Projects

COMMUNITY

Welcome to the New OWASP Chapters 
Sacramento, California
Marquette, Michigan
Ranchi, India
Paraiba, Brazil
Calgary, Canada 

CORPORATE MEMBERS 

 
Premier Corporate Member
Contributor Corporate Members

*Ads and logos are not endorsements and reflect the messages of the advertiser only. *
Join us
Donate
Our mailing address is:
OWASP Foundation 
1200-C Agora Drive, #232
Bel Air, MD 21014  
Contact Us
Unsubscribe






This email was sent to *|EMAIL|*
why did I get this?    unsubscribe from this list    update subscription preferences
*|LIST:ADDRESSLINE|*

Tuesday, May 5, 2020

John The Ripper


"A powerful, flexible, and fast multi-platform password hash cracker John the Ripper is a fast password cracker, currently available for many flavors of Unix (11 are officially supported, not counting different architectures), DOS, Win32, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. It supports several crypt(3) password hash types which are most commonly found on various Unix flavors, as well as Kerberos AFS and Windows NT/2000/XP LM hashes. Several other hash types are added with contributed patches. You will want to start with some wordlists, which you can find here or here. " read more...

Website: http://www.openwall.com/john

More information

WHAT IS ETHICAL HACKING

What is ethical hacking?

Ethical hacking is identifying weakness in computer system and/or computer networks and coming with countermeasures that protect the weakness.

Ethical hackers must abide by the following rules-
1-Get written permission from the owner of the computer system and/or computer network before  hacking.
2-Protect the privacy of the organisation been hacked etc.

Ethical Hacking and Ethical Hacker are terms used to describe hacking performed by a company or individual to help identity potential threats on a computer or network.
 

An Ethical Hacker attempts to byepass system security and search for any weak point that could be exploited by Malicious Hackers.

Continue reading


Friday, May 1, 2020

Episode 19: Top Faves With Dave Goes To The Library Is Live!

Episode 19: Top Faves with Dave goes to the Library.

https://soundcloud.com/user-989538417/episode-19-top-faves-with-dave-goes-to-the-library

We talk with Dave Tubbs about what novels inspire us to game.

The Veteran Wargamer is brought to you by King's Hobbies and Games.

https://www.kingshobbiesandgames.com/

Special Artizan Service Miniatures
https://www.facebook.com/Special-Artizan-Service-Miniatures-1791793644366746/


Other companies we mentioned:
Sharpe's Rifles
Sharp Practice!
http://toofatlardies.co.uk/product/sharp-practice-2/

The Killer Angels
Regimental Fire and Fury
http://www.fireandfury.com/products/desc_rff.shtml

PicoArmor ACW
https://www.picoarmor.com/product-category/american-civil-war-3mm/

 
The Hobbit
GW LOTR/Hobbit
https://www.games-workshop.com/en-US/The-Hobbit

Song of Blades and Heroes
http://www.ganeshagames.net/product_info.php?products_id=7

Frostgrave
https://ospreypublishing.com/frostgrave

Iron Guard
and
Fifteen Hours

Warhammer 40,000
https://warhammer40000.com/

Honor Harrington

Full Thrust
https://shop.groundzerogames.co.uk/rules.html

Ad Astra Games Miniatures
https://www.nobleknight.com/ViewProducts.asp_Q_ProductLineID_E_2137428268_A_ManufacturerID_E_2145082606_A_CategoryID_E_16_A_GenreID_E_0

For Whom the Bell Tolls

A World Aflame
https://ospreypublishing.com/a-world-aflame-interwar-wargame-rules-1918-39

Chain of Command
https://toofatlardies.co.uk/product/chain-of-command-rules/

Flames of War partisans
http://www.flamesofwar.com/hobby.aspx?art_id=3185

Eisenhorn Triology
Inquisitor
https://www.amazon.com/Inquisitor-Battle-Emperors-Gav-Thorpe/dp/1841540773/ref=sr_1_7?s=books&ie=UTF8&qid=1497582113&sr=1-7&keywords=inquisitor+game

Rogue Stars
https://ospreypublishing.com/rogue-stars

Shadow War Armageddon
https://www.games-workshop.com/en-GB/shadowwar-armageddon-sb-eng-2017

Team Yankee
and
Red Storm Rising

GHQ
http://www.ghqmodels.com/

PFC C-in-C
http://www.pfc-cinc.com/front_page.html

Baccus 6mm
https://www.baccus6mm.com/

Les Miserables
and
Three Musketeers

En Garde!
https://ospreypublishing.com/en-garde

Ronin
https://ospreypublishing.com/ronin-skirmish-wargames-in-the-age-of-the-samurai

Pike and Shotte
http://www.warlordgames.com/pike-shotte-2/

Warlord Landsknechts
https://us-store.warlordgames.com/collections/landsknecht

Hammer's Slammers

Hammer's Slammers Rules
http://www.hammers-slammers.com/home.htm

15mm Slammers vehicles
http://ainstycastings.co.uk/index.php/cPath/71

Dirtside
https://shop.groundzerogames.co.uk/rules.html

Picoarmor SciFi
https://www.picoarmor.com/product-category/sci-fi-3mm/

War and Peace

Among the Thugs
Blood Bowl
https://www.games-workshop.com/en-US/Boxed-Games?N=2192287784+2492297563&_requestid=3572451

Dune
 
Conan

Conan Adventure Game
http://www.monolithedition.com/conan-en/

Copplestone 15mm Barbarians
https://copplestonecastings.co.uk/list.php?cat=18&page=1

Grenadier/Mirliton Barbarians
 http://www.mirliton.it/index.php?cName=fantasy-2528mm-barbarians


Music courtesy bensound.com. Recorded with zencastr.com. Edited with Audacity. Make your town beautiful; get a haircut.

Ep 34: Top Faves With Dave Goes Digital Is Live!

Ep 34: Top Faves with Dave goes digital

https://soundcloud.com/user-989538417/ep-34-top-faves-with-dave-goes-digital

Dave Tubbs, Nick Nerthery and I talk about military-themed video games.

Join the conversation at https://theveteranwargamer.blogspot.com, email theveteranwargamer@gmail.com, Twitter @veteranwargamer

Follow Dave on Twitter! @FrmrSldrFgtPlyr

Try Audible for your free audiobook credit by going to http://audibletrial.com/tvwg

New Segment - Stump Jay! Dave's attempt to stump Jay took 308 milliseconds to solve.
Maori Wars Empress Miniatures - http://www.empressminiatures.com/page11.htm

Emu Wars Eureka Miniatures - http://www.eurekamin.com.au/product_info.php?cPath=131&products_id=13353

SCW Empress - http://www.empressminiatures.com/page9.htm

Top Faves
Myth: The Fallen Lords - http://projectmagma.net/what/
Gog - https://www.gog.com/
Wolfenstein 3D - http://3d.wolfenstein.com/game_NA.php
Starcraft: Brood War - https://starcraft.com/en-us/
War Thunder - https://warthunder.com/en
Wolfpack - https://www.emuparadise.me/Abandonware_Games/WolfPack_(1990)(NovaLogic)/95670
UBoot Kickstarter - https://www.kickstarter.com/projects/phalanxgames/uboot-the-board-game
Captain Sonar - https://www.asmodee.us/en/games/captain-sonar/
Red November - https://www.fantasyflightgames.com/en/products/red-november/
Close Combat: A Bridge Too Far - https://www.gog.com/promo/20180206_launch_promo_close_combat
Ghost Recon: Advanced Warfighter - https://www.gamestop.com/xbox-360/games/ghost-recon-advanced-warfighter/39276
Axis & Allies CD - http://www.harrisgamedesign.com/phpBB3/viewtopic.php?t=2268
Company of Heroes -  http://www.companyofheroes.com/
Dawn of War - https://www.dawnofwar.com/
Halo - https://www.halowaypoint.com/en-us
Halo Fleet Battles - https://boardgamegeek.com/boardgame/176936/halo-fleet-battles-fall-reach
Diplomacy Play By Email - http://www.playdiplomacy.com/
Junta - https://www.alderacsite.com/junta/
Call of Duty: World at War - http://store.steampowered.com/app/10090/Call_of_Duty_World_at_War/
Total War - https://www.totalwar.com/
Brothers In Arms: Hell's Highway - http://store.steampowered.com/app/15390/Brothers_in_Arms_Hells_Highway/
Nick's Article - http://www.offdutygamers.com/2010/01/brothers-in-arms-hell%E2%80%99s-highway-good-enough-to-be-a-training-aid/

Music courtesy bensound.com. Recorded with zencastr.com. Edited with Audacity. Make your town beautiful; get a haircut.