Security-C4PO is an open-source web-application for managing and documenting penetration tests. This tool allows a security tester to keep track of the testing progress according to the OWASP Testing Guide. This application aims to make the offical Testing Guide more actionable to work with.
Go to file
Marcel Haag 2e6f78c1f4 feat: As a user, I want to create reports only in PDF file format 2023-05-09 09:43:08 +02:00
.github/ISSUE_TEMPLATE Update issue templates 2022-03-17 10:03:00 +01:00
security-c4po-angular feat: As a user, I want to create reports only in PDF file format 2023-05-09 09:43:08 +02:00
security-c4po-api feat: As a user I want to disable / enable objectives 2023-04-12 14:26:58 +02:00
security-c4po-cfg feat: include reporting service in docker-compose 2023-05-03 15:08:18 +02:00
security-c4po-reporting feat: As a user, I want to create reports only in PDF file format 2023-05-09 09:43:08 +02:00
wiki feat: As a user I want a timer to track the time spent on each objective 2023-03-08 11:04:49 +01:00
.gitignore feat: Updated README.md and wiki folder 2021-11-17 16:02:56 +01:00
CONTRIBUTING.md Update CONTRIBUTING.md 2022-08-19 13:14:59 +02:00
LICENSE.md Updated LICENSE.md 2022-08-19 13:14:59 +02:00
README.md fix: Changed c4po logo and refactored FE 2022-09-23 11:02:15 +02:00
THIRD-PARTY-LICENSES.md Create THIRD-PARTY-LICENSES.md 2022-08-19 13:14:59 +02:00
c4po.sh feat: include reporting service in docker-compose 2023-05-03 15:08:18 +02:00

README.md

alt architecture

Application Architecture

alt architecture

Data Structure

alt datastructure

Technical Requirements

  • Docker / Docker-compose
  • OpenJDK 11
  • Node 14.15.1 / npm 6.14.8
  • MongoDB 4.4.6

Tools

  • mongoDB Compass
  • Postman

Conventions

  • Branch: <initial>_c4po_<issuenumber>
  • Commit: feat: <What was implemented?> or fix: <What got fixed?>

Development server

Execute 'c4po.sh' and all services will run on a dev server.

Testuser Credentials:

  • Username: ttt
  • Password: Test1234!

C4PO Roadmap

alt roadmap