OWASP Broken Web Applications Version 1.2 Released

[Chuck Willis]

Greetings,

   I am happy to announce the release of Version 1.2 of the OWASP Broken Web Applications VM. There are relatively few changes since the 1.2 release candidate, though that version included a fair number of changes since the prior 1.1.1 release. Notes for this release are included at the bottom of this email.

   File names, MD5s, and sizes for this release are below:

OWASP_Broken_Web_Apps_VM_1.2.7z  MD5: 5ff063fe3d01887dab49a5903c27c8fe  Size: 1.7 GB
OWASP_Broken_Web_Apps_VM_1.2.zip  MD5: 39b807c1ac617d72b6739452b622ee65  Size: 2.2 GB
OWASP_Broken_Web_Apps_VM_1.2.ova  MD5: c1c046b2decd9c64b78c51ce2719eb3e  Size: 2.4 GB

   As always, if you notice any issues with the VM, please let us know via email to the group here or directly to me.  Also, please continue to submit (and view) vulnerabilities at https://sourceforge.net/p/owaspbwa/tickets/?limit=999&sort=_severity+asc.

   Next up for the project is Black Hat USA. I will be demonstrating this new version of the VM at the Black Hat Arsenal on Thursday, August 6th starting at 10 am. Feel free to come by if you have any questions / suggestions or just to say "hi".

   Finally, as you may know, Google Code is in the process of shutting down. Later this month, I'll be starting the process to move the project resources over to GitHub. The shutdown will not affect the VMs -- they will continue to function as they always have -- but I will have to move things like the user guide that are linked from the home page on the VM. Once the transition to GitHub is complete (around this fall), I plan to release another version of the VM.

Chuck

Version 1.2 - 2015-08-03
- Updated Mutillidae
- Other miscellaneous, minor updates

Version 1.2rc1 - 2015-06-24
- Updated Mutillidae and WAVSEP
  o Removed IP address restrictions on Mutillidae
  o Added script to rebuild WAVSEP
- Added bWAPP application and script to automatically update bWAPP
- Added OWASP Security Shepherd application and supporting scripts.
- Likely updated other applications

[David Batts]

Hello People,
i am very new to OWASP and need some help. I am going for job in 10 days and one of the requirements is an "hacktest" . I was asked to study and use OWASP in order to prepare for the test. My question is how and where do I add the Web Application VM? do i use Virtualbox? of add it to Kali Linux. HELP!

David