Flagship Projects: OWTF Flagship Project
summary
OWTF is a Python-based pentest orchestration tool with Docker install and standard Python install options, a React web UI plus CLI, and a REST API for automation. Recent GSOC work adds a working authentication module with registration, OTP and password reset (enabling cautious public deployment), UI-created custom plugin groups to run dozens of plugins at once, and React lazy loading that cuts initial payload from ~6–7 MB to incremental loads. Report export and role-based access are planned.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 1:55OWTF project overview
- 2:38OWTF web interface overview
- 5:16OWTF backend architecture
- 6:18OWTF new auth module
- 7:23Plugin groups setup
- 8:46Demo custom plugin group
- 9:50OWTF UI performance
- 11:13OWTF development plans
- 12:18Future features and reporting
- 12:39Contributing to OWTF
related talks
55mAutomating Security Testing with the OWTF
33mWAFs FTW! A modern devops approach to security testing your WAF
44mSecurity Research with Open Source Software: Vol. Omega
32mSecOps Automation And Orchestration
01h 14mYour trusty Python package: TTPs of attacks on OSS in Python
45mLeveraging Projects and Tools to Transform Your SDLC
29mPurple Teaming with OWASP PurpleTeam
28mSecurity Does Not Need to Be Fun: Ignoring OWASP to Have a Terrible Time