Skip to content

Commit

Permalink
Fix: Broken OWASP SCSTG & SCSVS project page links
Browse files Browse the repository at this point in the history
  • Loading branch information
WarlordSam07 committed Jan 20, 2025
1 parent f6bf2d4 commit 72a1d65
Show file tree
Hide file tree
Showing 14 changed files with 40 additions and 40 deletions.
2 changes: 1 addition & 1 deletion docs/SCSTG/0x01-Foreword.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ Smart contracts are at the heart of decentralized ecosystems, but their complexi

If you have feedback, suggestions, or would like to contribute, feel free to create an issue on GitHub or join the discussion on OWASP’s Slack. See the README for details:

[https://www.github.com/OWASP/owasp-scstg/](https://www.github.com/OWASP/owasp-scstg/)
[https://www.github.com/OWASP/www-project-smart-contract-security-testing-guide/](https://www.github.com/OWASP/www-project-smart-contract-security-testing-guide/)

**smart contract (noun): A self-executing contract with the terms of the agreement directly written into lines of code, enabling secure, automated transactions on a blockchain.**

Expand Down
6 changes: 3 additions & 3 deletions docs/SCSTG/0x02a-Frontispiece.md
Original file line number Diff line number Diff line change
Expand Up @@ -19,17 +19,17 @@ The OWASP SCSVS and SCSTG are trusted by the following platform providers and st

All our Changelogs are available online at the OWASP SCSTG GitHub repository, see the Releases page:

<https://github.com/OWASP/owasp-scstg/releases>
<https://github.com/OWASP/www-project-smart-contract-security-testing-guide/releases>

## Disclaimer

Please consult the laws in your country before executing any tests against smart contracts by utilizing the SCSTG materials. Refrain from violating the laws with anything described in the SCSTG.

Our [Code of Conduct] has further details: <https://github.com/OWASP/owasp-scstg/blob/master/.github/CODE_OF_CONDUCT.md>
Our [Code of Conduct] has further details: <https://github.com/OWASP/www-project-smart-contract-security-testing-guide/blob/master/.github/CODE_OF_CONDUCT.md>

OWASP thanks the many authors, reviewers, and editors for their hard work in developing this guide. If you have any comments or suggestions, please connect with us: <https://scs.owasp.org/contact>

If you find any inconsistencies or typos please open an issue in the OWASP SCSTG Github Repo: <https://github.com/OWASP/owasp-scstg>
If you find any inconsistencies or typos please open an issue in the OWASP SCSTG Github Repo: <https://github.com/OWASP/www-project-smart-contract-security-testing-guide>

## Copyright and License

Expand Down
4 changes: 2 additions & 2 deletions docs/SCSTG/0x03-Overview.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,9 +4,9 @@ The rise of smart contracts has revolutionized the way agreements are executed,

## How to Use the Smart Contract Security Project

The OWASP Smart Contract Security Project provides a structured approach to evaluating and improving the security of smart contracts. It begins with the [OWASP Smart Contract Security Verification Standard (SCSVS)](https://github.com/OWASP/owasp-scsvs/), which outlines a comprehensive security model and provides a set of security requirements for smart contracts. These requirements are designed to be used across the entire development lifecycle, serving architects, developers, testers, and security professionals.
The OWASP Smart Contract Security Project provides a structured approach to evaluating and improving the security of smart contracts. It begins with the [OWASP Smart Contract Security Verification Standard (SCSVS)](https://github.com/OWASP/www-project-smart-contract-security-verification-standard/), which outlines a comprehensive security model and provides a set of security requirements for smart contracts. These requirements are designed to be used across the entire development lifecycle, serving architects, developers, testers, and security professionals.

Once the SCSVS requirements have been identified for your use case, the next step is to apply the [OWASP Smart Contract Security Testing Guide (SCSTG)](https://github.com/OWASP/owasp-scstg/). The SCSTG maps directly to the SCSVS requirements, offering practical testing methodologies and techniques. Together, these resources form a robust framework for smart contract security.
Once the SCSVS requirements have been identified for your use case, the next step is to apply the [OWASP Smart Contract Security Testing Guide (SCSTG)](https://github.com/OWASP/www-project-smart-contract-security-testing-guide/). The SCSTG maps directly to the SCSVS requirements, offering practical testing methodologies and techniques. Together, these resources form a robust framework for smart contract security.

## What's Covered in the Smart Contract Security Guide

Expand Down
8 changes: 4 additions & 4 deletions docs/SCSTG/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,17 +7,17 @@ hide:

<img src="../assets/scstg_cover.png" align="right" style="border-radius: 3px; margin: 3em; box-shadow: rgba(149, 157, 165, 0.2) 0px 8px 24px;" width="350px" />

<a href="https://github.com/OWASP/owasp-scstg/">:material-github: GitHub Repo</a>
<a href="https://github.com/OWASP/www-project-smart-contract-security-testing-guide/">:material-github: GitHub Repo</a>

<a href="https://owasp.org/owasp-scstg">:material-web: OWASP Project Page</a>
<a href="https://owasp.org/www-project-smart-contract-security-testing-guide">:material-web: OWASP Project Page</a>

The **OWASP Smart Contract Security Testing Guide (SCSTG)** is a comprehensive manual designed to assist developers, auditors, and security professionals in evaluating the security of smart contracts. It provides detailed methodologies for identifying, verifying, and addressing vulnerabilities in smart contracts across various risk categories. The guide includes examples of common security flaws, methods for detecting these issues, and strategies for mitigating or eliminating the risks.

It describes technical processes for verifying the controls listed in the [OWASP SCSVS](https://scs.owasp.org/SCSVS) through the weaknesses defined by the [OWASP SCWE](https://scs.owasp.org/SCWE).

<br>

<button class="scs-button" onclick="window.location.href='https://github.com/OWASP/owasp-scstg/releases/latest/download/OWASP_SCSTG.pdf';"> Download the SCSTG</button>
<button class="scs-button" onclick="window.location.href='https://github.com/OWASP/www-project-smart-contract-security-testing-guide/releases/latest/download/OWASP_SCSTG.pdf';"> Download the SCSTG</button>

<br>

Expand All @@ -26,6 +26,6 @@ Start exploring the SCSTG:
<a href="/SCSTG/tests/" class="md-button md-button--primary" style="margin: 5px; min-width: 12em; text-align: center;">:octicons-codescan-checkmark-24: Tests (v1)</a>


<span style="color: darkgray; font-size: small"> :blue_heart:{ .pump } Support the project by purchasing the [OWASP SCSTG on leanpub.com](https://leanpub.com/owasp-scstg). All funds raised through sales of this book go directly into the project budget and will be used to for technical editing and designing the book and fund production of future releases.</span>
<span style="color: darkgray; font-size: small"> :blue_heart:{ .pump } Support the project by purchasing the [OWASP SCSTG on leanpub.com](https://leanpub.com/www-project-smart-contract-security-testing-guide). All funds raised through sales of this book go directly into the project budget and will be used to for technical editing and designing the book and fund production of future releases.</span>

<br>
6 changes: 3 additions & 3 deletions docs/SCSVS/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -9,17 +9,17 @@ search:

<img src="../assets/scsvs_cover.png" align="right" style="border-radius: 3px; margin: 3em; box-shadow: rgba(149, 157, 165, 0.2) 0px 8px 24px;" width="350px" >

<a href="https://github.com/OWASP/owasp-scsvs/">:material-github: GitHub Repo</a>
<a href="https://github.com/OWASP/www-project-smart-contract-security-verification-standard/">:material-github: GitHub Repo</a>

<a href="https://owasp.org/owasp-scsvs">:material-web: OWASP Project Page</a>
<a href="https://owasp.org/www-project-smart-contract-security-verification-standard">:material-web: OWASP Project Page</a>

The **Smart Contract Security Verification Standard (SCSVS)** is a list of specific security requirements or tests for smart contracts, primarily written in Solidity and deployed on EVM-based blockchains. These requirements are intended to be used by architects, developers, testers, security professionals, tool vendors, and consumers to define, build, test, and verify secure smart contracts, decentralized applications (dApps) and blockchain protocols. The standard promotes best practices for ensuring the security and integrity of smart contracts and decentralized finance (DeFi) systems.

To complement the SCSVS, the OWASP SCS project also provides the [OWASP Smart Contract Security Testing Guide (SCSTG)](https://scs.owasp.org/SCSTG), the [OWASP Smart Contract Weakness Enumeration (SCWE)](https://scs.owasp.org/SCWE) and the [OWASP SCS Checklist](../checklists/index.md) which together are the perfect companion for verifying the controls listed in the OWASP SCSVS and demonstrate compliance.

<br>

<button class="scs-button" onclick="window.location.href='https://github.com/OWASP/owasp-scsvs/releases/download/v0.0.1/OWASP_Smart_Contract_Security_Verification_Standard-0.0.1_en.pdf';"> Download the SCSVS</button>
<button class="scs-button" onclick="window.location.href='https://github.com/OWASP/www-project-smart-contract-security-verification-standard/releases/download/v0.0.1/OWASP_Smart_Contract_Security_Verification_Standard-0.0.1_en.pdf';"> Download the SCSVS</button>

<br>

Expand Down
4 changes: 2 additions & 2 deletions docs/SCWE/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,9 +3,9 @@ hide: toc
title: Smart Contract Security Weakness Enumeration (SCWE)
---

<a href="https://github.com/OWASP/owasp-scstg/weaknesses">:material-github: GitHub Repo</a>
<a href="https://github.com/OWASP/www-project-smart-contract-security-testing-guide/weaknesses">:material-github: GitHub Repo</a>

<a href="https://owasp.org/owasp-scstg">:material-web: OWASP Project Page</a>
<a href="https://owasp.org/www-project-smart-contract-security-testing-guide">:material-web: OWASP Project Page</a>

??? info "About the SCWE"

Expand Down
4 changes: 2 additions & 2 deletions docs/checklists/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,9 +11,9 @@ search:

The OWASP Smart Contract Security Checklist contains links to the SCSTG test cases for each SCSVS control.

<a href="https://github.com/OWASP/owasp-scstg/checklists">:material-github: GitHub Repo</a>
<a href="https://github.com/OWASP/www-project-smart-contract-security-testing-guide/checklists">:material-github: GitHub Repo</a>

<a href="https://owasp.org/owasp-scstg">:material-web: OWASP Project Page</a>
<a href="https://owasp.org/www-project-smart-contract-security-testing-guide">:material-web: OWASP Project Page</a>

- **Security Assessments / Pentests**: ensure you're at least covering the standard attack surface and start exploring.
- **Standard Compliance**: includes SCSVS and SCSTG versions and commit IDs.
Expand Down
18 changes: 9 additions & 9 deletions docs/contributing.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,12 +11,12 @@ The SCS project is an open source effort and we welcome all kinds of contributio
**Help us improve & join our community:**

- 🐞 [Report an error (typos, grammar)](contributing/1_How_Can_You_Contribute.md#create-issues) or [fix it on a Pull Request](contributing/1_How_Can_You_Contribute.md#open-a-pull-request).
- 💬 Give feedback ([SCSTG](https://github.com/OWASP/owasp-scstg/discussions/categories/general)/[SCSVS](https://github.com/OWASP/owasp-scsvs/discussions/categories/general)).
- 🙏 Ask questions ([SCSTG](https://github.com/OWASP/owasp-scstg/discussions/categories/q-a)/[SCSVS](https://github.com/OWASP/owasp-scsvs/discussions/categories/q-a)).
- 💬 Give feedback ([SCSTG](https://github.com/OWASP/www-project-smart-contract-security-testing-guide/discussions/categories/general)/[SCSVS](https://github.com/OWASP/www-project-smart-contract-security-verification-standard/discussions/categories/general)).
- 🙏 Ask questions ([SCSTG](https://github.com/OWASP/www-project-smart-contract-security-testing-guide/discussions/categories/q-a)/[SCSVS](https://github.com/OWASP/www-project-smart-contract-security-verification-standard/discussions/categories/q-a)).

**Contribute with content:**

- 💡 Propose ideas or suggest improvements ([SCSTG](https://github.com/OWASP/owasp-scstg/discussions/categories/ideas)/[SCSVS](https://github.com/OWASP/owasp-scsvs/discussions/categories/ideas)). If it qualifies we'll promote it to an Issue.
- 💡 Propose ideas or suggest improvements ([SCSTG](https://github.com/OWASP/www-project-smart-contract-security-testing-guide/discussions/categories/ideas)/[SCSVS](https://github.com/OWASP/www-project-smart-contract-security-verification-standard/discussions/categories/ideas)). If it qualifies we'll promote it to an Issue.
- 📄 [Create a Pull Request](contributing/1_How_Can_You_Contribute.md#open-a-pull-request) for concrete fixes (e.g. grammar/typos) or content already approved by the core team.

Before you start contributing, please check our pages ["How Can You Contribute?"](contributing/1_How_Can_You_Contribute.md) and ["Getting Started"](contributing/2_Getting_Started.md). If you have any doubts [please contact us](contact.md).
Expand All @@ -28,13 +28,13 @@ Although we greatly appreciate any and all contributions to the project, there a
- **No advertisement**: The OWASP Smart Contract Security Project cannot be used as a platform for advertisement of commercial tools, companies or individuals. Technical content such as the implementation of certain techniques or tests should be written with free and open-source tools in mind. Commercial tools are typically not accepted, but might be referenced in some specific cases.
- **No unnecessary self-promotion of tools or blog posts**: If you have a relation with one of the URLs or tools you are referencing, please state so in the PR so that we can verify that the reference is in line with the rest of the guide.

Please be sure to take a careful look at our [Code of Conduct](https://github.com/OWASP/owasp-scstg/blob/master/.github/CODE_OF_CONDUCT.md "Code of Conduct") for all the details and [ask us](contact.md) in case of doubt.
Please be sure to take a careful look at our [Code of Conduct](https://github.com/OWASP/www-project-smart-contract-security-testing-guide/blob/master/.github/CODE_OF_CONDUCT.md "Code of Conduct") for all the details and [ask us](contact.md) in case of doubt.

<br>

## Our Contributors

All of our contributors are listed in GitHub repos. See [OWASP SCS Authors & Co-Authors](https://github.com/OWASP/owasp-scs/graphs/contributors), [SCSTG Contributors](https://github.com/OWASP/owasp-scstg/graphs/contributors) and [SCSVS Contributors](https://github.com/OWASP/owasp-scsvs/graphs/contributors).
All of our contributors are listed in GitHub repos. See [OWASP SCS Authors & Co-Authors](https://github.com/OWASP/owasp-scs/graphs/contributors), [SCSTG Contributors](https://github.com/OWASP/www-project-smart-contract-security-testing-guide/graphs/contributors) and [SCSVS Contributors](https://github.com/OWASP/www-project-smart-contract-security-verification-standard/graphs/contributors).


<br>
Expand All @@ -46,9 +46,9 @@ All of our contributors are listed in GitHub repos. See [OWASP SCS Authors & Co-

### OWASP SCSVS

The latest version of the SCSVS v1 including all translations is available here: <https://github.com/OWASP/owasp-scsvs/releases/tag/v0.0.1>
The latest version of the SCSVS v1 including all translations is available here: <https://github.com/OWASP/www-project-smart-contract-security-verification-standard/releases/tag/v0.0.1>

**Note**: This contributor table is generated based on our [GitHub contribution statistics](https://github.com/OWASP/owasp-scsvs/graphs/contributors "GitHub contribution statistics"). For more information on these stats, see the [GitHub Repository README](https://github.com/OWASP/owasp-scsvs/blob/master/README.md "GitHub Repository README"). We manually update the table, so be patient if you're not listed immediately.
**Note**: This contributor table is generated based on our [GitHub contribution statistics](https://github.com/OWASP/www-project-smart-contract-security-verification-standard/graphs/contributors "GitHub contribution statistics"). For more information on these stats, see the [GitHub Repository README](https://github.com/OWASP/www-project-smart-contract-security-verification-standard/blob/master/README.md "GitHub Repository README"). We manually update the table, so be patient if you're not listed immediately.

| Project Lead | Lead Author | Contributors and Reviewers |
| ------- | --- | ----------------- |
Expand All @@ -63,9 +63,9 @@ The latest version of the SCSVS v1 including all translations is available here:

### OWASP SCSTG

The latest version of the SCSTG v0.0.1 is available here: <https://github.com/OWASP/owasp-scstg/releases/tag/v0.0.1>
The latest version of the SCSTG v0.0.1 is available here: <https://github.com/OWASP/www-project-smart-contract-security-testing-guide/releases/tag/v0.0.1>

**Note**: This contributor table is generated based on our [GitHub contribution statistics](https://github.com/OWASP/owasp-scstg/graphs/contributors "GitHub contribution statistics"). For more information on these stats, see the [GitHub Repository README](https://github.com/OWASP/owasp-scstg/blob/master/README.md "GitHub Repository README"). We manually update the table, so be patient if you're not listed immediately.
**Note**: This contributor table is generated based on our [GitHub contribution statistics](https://github.com/OWASP/www-project-smart-contract-security-testing-guide/graphs/contributors "GitHub contribution statistics"). For more information on these stats, see the [GitHub Repository README](https://github.com/OWASP/www-project-smart-contract-security-testing-guide/blob/master/README.md "GitHub Repository README"). We manually update the table, so be patient if you're not listed immediately.

- **Reviewers**: Reviewers have consistently provided useful feedback through GitHub issues and pull request comments.
- **Top Contributors**: Top contributors have consistently contributed quality content and have at least 500 additions logged in the GitHub repository.
Expand Down
2 changes: 1 addition & 1 deletion docs/contributing/1_How_Can_You_Contribute.md
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,7 @@ You can contribute with content or corrections by opening a Pull Request (PR).
## ✅ Become a Reviewer

You can [Review Pull Requests (PRs)](https://github.com/OWASP/owasp-scsvs/pulls) and also gain contributions. If you are a fluent speaker in any of the different languages that the SCSVS is available in, feel free to give feedback on any of the submitted PRs.
You can [Review Pull Requests (PRs)](https://github.com/OWASP/www-project-smart-contract-security-verification-standard/pulls) and also gain contributions. If you are a fluent speaker in any of the different languages that the SCSVS is available in, feel free to give feedback on any of the submitted PRs.

After your PR or issue has been submitted, we will review it as quickly as possible which typically only takes a few days. If you think we have forgotten about it, feel free to give us a nudge after 7 days have passed.

Expand Down
Loading

0 comments on commit 72a1d65

Please sign in to comment.