![“[RISK ASSESSMENT]
INTRODUCES A DANGEROUS
FALLACY: THAT
STRUCTURED INADEQUACY
IS ALMOST AS GOOD AS
ADEQUACY AND THAT
UNDERFUNDED SECURITY
EFFORTS PLUS RISK
MANAGEMENT ARE ABOUT
AS GOOD AS PROPERLY
FUNDED SECURITY WORK”](https://image.slidesharecdn.com/txlf-2013-130601101543-phpapp02/85/Be-Mean-to-your-Code-with-Gauntlt-txlf-2013-14-320.jpg)
Uploaded byJames Wickett
Be Mean to your Code with Gauntlt #txlf 2013
This document discusses Gauntlt, an open source security tool that helps developers test their code for vulnerabilities. It allows writing security tests using a behavior-driven development style. Gauntlt runs predefined attacks against a target and checks the output against success criteria. The document provides an overview of Gauntlt's features, examples of how to write tests for tools like nmap and sqlmap, and information on how to get started and contribute to the project.
More Related Content
Similar to Be Mean to your Code with Gauntlt #txlf 2013
Be Mean to your Code with Gauntlt #txlf 2013
- 1. Be Mean to YourCode with Gauntlt @gauntlt gauntlt.org
- 2. @wickett College Startup Web SystemsEngineer Media Startup Web Ops Lead DevOps
- 3.
- 4. I want you tojoin the devops movement
- 5. I want you tojoin the gauntlt project
- 6.
- 7.
- 8.
- 9.
- 10.
- 11.
- 12.
- 13.
- 14. “[RISK ASSESSMENT] INTRODUCES ADANGEROUS FALLACY: THAT STRUCTURED INADEQUACY IS ALMOST AS GOOD AS ADEQUACY AND THAT UNDERFUNDED SECURITY EFFORTS PLUS RISK MANAGEMENT ARE ABOUT AS GOOD AS PROPERLY FUNDED SECURITY WORK”
- 15.
- 16.
- 17. devs became coolagile
- 18.
- 20. dev and ops nowplay nice
- 21.
- 22.
- 23. culture automation measurement sharing credit to JohnWillis and Damon Edwards
- 24.
- 25. Your punch is soft,just likeyour heart
- 26.
- 27.
- 28.
- 30.
- 31.
- 32.
- 34.
- 35. gauntlt credits: Creators: Mani Tadayon James Wickett CommunityWrangler: Jeremiah Shirk Friends: Jason Chan, Netflix Neil Matatall, Twitter
- 36.
- 37.
- 38.
- 39.
- 40.
- 41.
- 42.
- 43. sometimes, you face thesame enemies again
- 44.
- 45.
- 46.
- 47. Gauntlt helps dev andops and security to communicate
- 48.
- 49. Conway’s Law Any organizationthat designs a system ... will inevitably produce a design whose structure is a copy of the organization's communication structure. Melvin E. Conway, 1968
- 50. Behavior Driven Development BDD is asecond-generation, outside–in, pull-based, multiple-stakeholder, multiple-scale, high-automation, agile methodology. It describes a cycle of interactions with well- defined outputs, resulting in the delivery of working, tested software that matters. Dan North , 2009
- 51.
- 52. $ gem installgauntlt install gauntlt
- 53. gauntlt design Simple Extensible UNIX™: stdin, stdout,exit status Minimum features yield maximum utility
- 54. $ gauntlt --list Definedattacks: curl dirb garmr generic nmap sqlmap sslyze
- 55. Attack File Plain TextFile Gherkin syntax: Given When Then
- 56. Feature: nmap attacksfor example.com Background: Given "nmap" is installed And the following profile: | name | value | | hostname | example.com | Scenario: Verify server is open on expected ports When I launch an "nmap" attack with: """ nmap -F <hostname> """ Then the output should contain: """ 80/tcp open http """ Scenario: Verify that there are no unexpected ports open When I launch an "nmap" attack with: """ nmap -F <hostname> """ Then the output should not contain: """ 25/tcp """ Given When Then When Then
- 57. running gauntlt withfailing tests $ gauntlt Feature: nmap attacks for example.com Background: Given "nmap" is installed And the following profile: | name | value | | hostname | example.com | Scenario: Verify server is open on expected ports When I launch an "nmap" attack with: """ nmap -F www.example.com """ Then the output should contain: """ 443/tcp open https """ 1 scenario (1 failed) 5 steps (1 failed, 4 passed) 0m18.341s
- 58. $ gauntlt Feature: nmapattacks for example.com Background: Given "nmap" is installed And the following profile: | name | value | | hostname | example.com | Scenario: Verify server is open on expected ports When I launch an "nmap" attack with: """ nmap -F www.example.com """ Then the output should contain: """ 443/tcp open https """ 1 scenario (1 passed) 4 steps (4 passed) 0m18.341s running gauntlt with passing tests
- 59. $ gauntlt --steps /^"(w+)"is installed in my path$/ /^"curl" is installed$/ /^"dirb" is installed$/ /^"garmr" is installed$/ /^"nmap" is installed$/ /^"sqlmap" is installed$/ /^"sslyze" is installed$/ /^I launch a "curl" attack with:$/ /^I launch a "dirb" attack with:$/ /^I launch a "garmr" attack with:$/ /^I launch a "generic" attack with:$/ /^I launch an "nmap" attack with:$/ /^I launch an "sslyze" attack with:$/ /^I launch an? "sqlmap" attack with:$/ /^the "(.*?)" command line binary is installed$/ /^the file "(.*?)" should contain XML:$/ /^the file "(.*?)" should not contain XML:$/ /^the following cookies should be received:$/ /^the following profile:$/
- 60. $ gauntlt --steps /^"(w+)"is installed in my path$/ /^"sqlmap" is installed$/ /^I launch a "generic" attack with:$/ /^I launch an? "sqlmap" attack with:$/
- 61. Feature: nmap attacksfor example.com Background: Given "nmap" is installed And the following profile: | name | value | | hostname | example.com | Scenario: Verify server is open on expected ports When I launch an "nmap" attack with: """ nmap -F <hostname> """ Then the output should contain: """ 80/tcp open http """ Scenario: Verify that there are no unexpected ports open When I launch an "nmap" attack with: """ nmap -F <hostname> """ Then the output should not contain: """ 25/tcp """ setup steps verify tool set config
- 62. Feature: nmap attacksfor example.com Background: Given "nmap" is installed And the following profile: | name | value | | hostname | example.com | Scenario: Verify server is open on expected ports When I launch an "nmap" attack with: """ nmap -F <hostname> """ Then the output should contain: """ 80/tcp open http """ Scenario: Verify that there are no unexpected ports open When I launch an "nmap" attack with: """ nmap -F <hostname> """ Then the output should not contain: """ 25/tcp """ attack get config
- 63. Feature: nmap attacksfor example.com Background: Given "nmap" is installed And the following profile: | name | value | | hostname | example.com | Scenario: Verify server is open on expected ports When I launch an "nmap" attack with: """ nmap -F <hostname> """ Then the output should contain: """ 80/tcp open http """ Scenario: Verify that there are no unexpected ports open When I launch an "nmap" attack with: """ nmap -F <hostname> """ Then the output should not contain: """ 25/tcp """ assert needle haystack
- 64.
- 65. Netflix Use Case Real WorldCloud Application Security, Jason Chan https://vimeo.com/54157394
- 66. Check your sslcerts
- 67.
- 68.
- 69.
- 70. @slow Feature: Run dirbscan on a URL Scenario: Run a dirb scan looking for common vulnerabilities in apache Given "dirb" is installed And the following profile: | name | value | | hostname | http://example.com | | wordlist | vulns/apache.txt | When I launch a "dirb" attack with: """ dirb <hostname> <dirb_wordlists_path>/<wordlist> """ Then the output should contain: """ FOUND: 0 """ .htaccess .htpasswd .meta .web access_log cgi cgi-bin cgi-pub cgi-script dummy error error_log htdocs httpd httpd.pid icons server-info server-status logs manual printenv test-cgi tmp ~bin ~ftp ~nobody ~root
- 71. I have myweakness. But I won't tell you! Ha Ha Ha!
- 72. Test for SQLInjection
- 73. @slow @announce Feature: Runsqlmap against a target Scenario: Identify SQL injection vulnerabilities Given "sqlmap" is installed And the following profile: | name | value | | target_url | http://example.com?x=1 | When I launch a "sqlmap" attack with: """ python <sqlmap_path> -u <target_url> --dbms sqlite --batch -v 0 --tables """
- 75. my_first.attack See ‘GET STARTED’on project repo Start here > https:// github.com/gauntlt/ gauntlt/tree/master/ examples Find examples for the attacks Add your config (hostname, login url, user) Repeat
- 76. Starter Kit onGitHub The starter kit is on GitHub: github.com/gauntlt/gauntlt-starter-kit Or, download a copy from: www.gauntlt.org/
- 77. Contribute to gauntlt See ‘FORDEVELOPERS’ in the README Get started in 7 steps
- 78. If you get stuck Checkthe README IRC Channel: #gauntlt on freenode @gauntlt on twitter Mailing List (https:// groups.google.com/forum/#!forum/ gauntlt) Office hours with weekly google hangout
- 79.
- 80. culture automation measurement sharing credit to JohnWillis and Damon Edwards
- 81. Next Features More output parsers Moreattack adapters JRuby & Java Support Front end UI / web reports
- 82.
- 83. get started with gauntlt github/gauntlt gauntlt.org videos tutorials @gauntlt IRC#gauntlt we help! start here cool vids!
- 84.
- 85.