Security-C4PO is an open-source web-application for managing and documenting penetration tests. This tool allows a security tester to keep track of the testing progress according to the OWASP Testing Guide. This application aims to make the offical Testing Guide more actionable to work with.
Go to file
Marcel Haag 8e2cfd81fa feat: As an user I want to have an additional pentest-header 2022-06-24 21:55:50 +02:00
.github/ISSUE_TEMPLATE Update issue templates 2022-03-17 10:03:00 +01:00
security-c4po-angular feat: As an user I want to have an additional pentest-header 2022-06-24 21:55:50 +02:00
security-c4po-api feat: as a developer I want to edit projects 2022-03-23 09:45:07 +01:00
security-c4po-cfg feat: added update project option and refactored project-dialog 2022-03-04 11:06:41 +01:00
wiki feat: As an user I want to have the necessary components available for correct layout 2022-03-25 22:00:53 +01:00
.gitignore feat: Updated README.md and wiki folder 2021-11-17 16:02:56 +01:00
README.md fix: adjusted README.md 2022-03-25 22:04:11 +01:00
c4po.sh feat: added mongodb to microservice and docker compose 2021-08-06 17:53:58 +02:00

README.md

security-c4po

Chief Innovator

Daniel Mader

Project Leads

  • Andreas Falk
  • Christina Paule

Developers

  • Marcel Haag
  • Norman Schmidt
  • Stipe Knez

Technical Requirements

  • Docker / Docker-compose
  • OpenJDK 11
  • Node 14.15.1 / npm 6.14.8
  • MongoDB 4.4.6

Tools

  • mongoDB Compass
  • Postman

Application Architecture

alt architecture

Data Structure

alt architecture

Conventions

  • Branch: <initial>_c4po_<issuenumber>
  • Commit: feat: <What was implemented?> or fix: <What got fixed?>

Development server

Execute 'c4po.sh' and all services will run on a dev server.

Testuser Credentials:

  • Username: ttt
  • Password: Test1234!