Questions tagged [automated-testing]

Test automation is the use of software to control the execution of tests, the comparison of actual outcomes to predicted outcomes, the setting up of test preconditions, and other test control and test reporting functions. Commonly, test automation involves automating a manual process already in place that uses a formalized testing process (wikipedia.org).

Filter by
Sorted by
Tagged with
1 vote
1 answer
146 views

what is dynamic code analysis? is it the same as DAST (Dynamic application security testing)?

I'm confused a bit between the terms, what I know is there is SAST and DAST, SAST is scanning code statically for possible vulnerabilities, this is done usually b automated tools, also equivalent to ...
user avatar
1 vote
0 answers
75 views

Security testing best practices when opening a project to the community [closed]

I notice that although we have many tools for security tests (SAST, SCA), I couldn't find an open source project on github that implements those tests. I've searched for google, Mozilla, OWASP and ...
user avatar
  • 69
0 votes
0 answers
67 views

Appscan not scanning vb files

I was doing SAST of a .NET application (.aspx and .vb) using Appscan source for analysis. I can scan aspx files but I am not able to scan .vb files in Appscan. How do you scan .vb files?
user avatar
0 votes
0 answers
64 views

What type of breach is occurring with Puppeteer.js on this Azure hosted webapp? (Snapshot provided)

When running the screenshot.js on https://try-puppeteer.appspot.com/, a web based Puppeteer.js I the image produced was of a gaming/gambling website, not my website at all! My site was https://...
user avatar
1 vote
1 answer
594 views

Auto-login to refresh token in Burp Suite 2

I want to run an automatic scan on a web application made with Angular and JSNode. On this one I have access to different types of accounts. On ZAP OWASP I can select the POST request, it detects the ...
user avatar
  • 13
-3 votes
1 answer
479 views

How am I supposed to check Defender's capability when it trusts me blindly after I mark a test malware file as "allowed"?

With enormous amounts of fighting with Windows/Microsoft Defender, I finally managed to download the "test virus" file from https://www.ikarussecurity.com/en/private-customers/download-test-...
user avatar
0 votes
1 answer
314 views

QR Code Security Testing [closed]

Within the scope of a project for my client, I test the existing site and the project for security vulnerabilities using OWASP ZAP. The client uses invitations with QR Codes and QR Codes to login to ...
user avatar
  • 131
1 vote
0 answers
195 views

performing authenticated scan for xss using selenium and xsstrike tool

I'm automating XSS security test, I automated XSS reflected and stored, now for automating XSS dom I'm required to use XSSStrike tool (https://github.com/s0md3v/XSStrike/wiki/Usage). Im using ...
user avatar
0 votes
1 answer
130 views

How to check/test security issues of freeware?

My company is implementing software whitelisting processes. There are bunches of freeware needing security testing. Actually, it just requires a preliminary evaluation rather than a deep analysis. ...
user avatar
  • 103
1 vote
0 answers
230 views

How to configure webapplication vuln scanner for local web apps [closed]

I am in the process of evaluating a number of webapp vuln scanners. For this task, I attack intentionally vulnerable web apps. So far I tried: Scanner > BurpPro Scanner, arachni, ZAP, wapiti, nikto, ...
user avatar
  • 11
1 vote
1 answer
893 views

Using Selenium to automate data entry

We have a report that generates ~100 rows daily and our customers have to enter the data into third-party software. We hoped that the software allows some kind of data upload so that our customers don'...
user avatar
  • 111
0 votes
1 answer
232 views

Adding Floating point operations to fuzzing?

During analysing a software testing paper I read We plan to add floating-point operations in order to extend fuzz testing capability. What kind of benefits I can expect from adding floating point ...
user avatar
  • 31
2 votes
0 answers
124 views

Analyzing binary by ZZUF and PEACH fuzzers

I have installed two different fuzzer ZZUF and PEACH fuzzers. Unfortunately, my lack of knowledge I could not test C++ binaries by both fuzzers. Testing binaries process is not given PEACH and ZZUF ...
user avatar
  • 31
1 vote
1 answer
83 views

Criteria for selecting fields and network protocols for fuzzing

I want to test a specific device connected to different networks using fuzzing. For each network interface, there are different services listening using different protocols, with open specification. ...
user avatar
  • 145
1 vote
0 answers
91 views

What makes detection of optimized-away memory clearing non-trivial?

In this 35C3 talk, it is said that while it is possible to manually inspect whether a package optimizes away memset() that clears sensitive memory, doing it automatically would be challenging. ...
user avatar
  • 6,514
10 votes
1 answer
24k views

Security scan result - Server leaks inodes via ETags

After automated scan on my web application I have the result that "Server leaks inodes via ETags, header found with file /icons/README, fields: 0x16a4 0x438c0000000". I've read about ETags but I don'...
user avatar
  • 1,148
8 votes
3 answers
1k views

Continuous SQL injection testing

We have a set of internal Python/Django web applications that are pretty well tested functionality-wise, but from time to time we do discover vulnerabilities and, specifically, places where SQL and ...
user avatar
  • 1,505
-1 votes
1 answer
447 views

Can I perform a local test for DNS leaking?

I want to test that the connection from my local machine to my VPN is set up correctly, specifically that I do not have DNS leaks. I am aware of web-based tools like dnsleaktest.com but they aren't ...
user avatar
  • 3,530
1 vote
2 answers
986 views

How to test the security of a hardened Web Browser?

I want to actually test the security of a sandboxed and hardened web browser after I implemented 3rd party security tools that claim to harden the browser. So how can I or what approach should I ...
user avatar
1 vote
1 answer
883 views

Host Testing Automation in Kali using Python [closed]

I posted the following question link on stack overflow and it was pointed out that I should possibly forward it to security exchange. For convenience the question is re-iterated below: I started ...
user avatar
4 votes
1 answer
14k views

How to test for NoSQL injections?

How to test for NoSQL injections? Considering that the structure (or actually the non-structure) of NoSQL databases is very different from structured databases like MySQL, MSSQL or PostgreSQL. Are ...
user avatar
  • 6,195
1 vote
0 answers
94 views

Firewall rulebase analysis offline/vendor agnostic a thing for FISMA/NIST

During design-time before a build-out, I currently create an excel file version of a firewall rulebase (policy) representing source/target/port/protocol/etc definitions before being pushed to the ...
user avatar
  • 131
5 votes
0 answers
181 views

Fuzzing services? [closed]

Are there any softwares/solutions with we can just: Download, start a binary/shell script And it will automatically start to fuzz ex.: the Linux kernel, like ex.: syzkaller? But if it would found ...
user avatar
4 votes
1 answer
189 views

Automated Malware Analysis Tools as a standalone

I am in search of automated malware analysis tools in order to list and evaluate/benchmark, but I can't find solutions that work as a standalone. Most of what I found is online or requires buying a ...
user avatar
11 votes
1 answer
603 views

Did DARPA's Cyber Grand Challenge winner actually discover previously unknown vulnerabilities?

DARPA announced a winner on August 4, 2016 of its Cyber Grand Challenge DARPA Cyber Grand Challenge. The contest was described as designed to accelerate the development of advanced, autonomous ...
user avatar
1 vote
2 answers
516 views

What phases does a network penetration test consist of?

What are common phases of a network infrastructure penetration test? Staring with discovering IP's and ports? A simple vulnerability assessment, checking version information of banners from different ...
user avatar
  • 6,195
13 votes
4 answers
14k views

How to perform a proper DDoS test in a safe and controlled way?

What is the proper and safe way to perform a DDoS test without crashing the whole infrastructure? What different types of DDoS attacks are there and what things should be considered performing such a ...
user avatar
  • 6,195
4 votes
2 answers
258 views

Use of automated security testing tools in the industry

I read this article about the 10 year old Finnish boy collecting a $10,000 bug bounty from Instagram with interest. According to the article (and I hope someone can shed more light on the exact ...
user avatar
1 vote
2 answers
76 views

Assuming existence of sufficient number of benign inputs?

I have come across multiple machine learning based security solutions that train their detectors/models using "benign" inputs. The assumption is that the operator has access to sufficiently ...
user avatar
  • 113
5 votes
2 answers
9k views

Penetrate Testing Java Web Applications

First thing first; this is something I have never done before. I have a web application written in Java (JSP and Servlet) and use MySQL as the database. Application is deployed in Amazon EC2, an ...
user avatar
  • 191
5 votes
1 answer
2k views

Automatically enumerate missing patches on penetration test

Nessus, when running a credentialed scan can check patch levels and return vulnerabilities when a package is one that hasn't been updated to the latest, non-vulnerable version. What is a good way of ...
user avatar
3 votes
3 answers
1k views

ASV scanning scope

My organisation has 200+ websites each with an assigned IP address, these IP addresses evaluate to a pair of load balancers. Behind these are a firewall and then 8 application servers behind this, all ...
user avatar
1 vote
0 answers
649 views

Tools for finding stored XSS vulnerabilities, given DB write access? [closed]

I'm aware that there are various tools for testing for XSS vulnerabilities. However, all the ones that I'm aware of (Vega, possibly BeEF, etc.) operate purely client-side. When testing for stored XSS ...
user avatar
  • 2,809
1 vote
1 answer
156 views

Any standard tests to prevent hacking? [closed]

I am very new in programming world so my question may sound weird. I am useing selenium to test an application, yesterday one of my colleagues found this issue that if someone enters this: <script ...
user avatar
  • 21
1 vote
1 answer
2k views

OAuth2 Authorization and Resource Server security check

I'm about to launch a web api using OAuth2 for authentication (authorization code, implicit and client credentials flows). The protocol is implemented using the DotNetOpenAuth v4.3 library. Although a ...
user avatar
  • 135
1 vote
0 answers
207 views

Pathping for test Pinging from subnets

Does anyone know if PathPing or NMAP can ping or scan from predefinded source IPs? I am checking connectivity from agents on remote hosts to a destination site from my host. Is there a switch or tool ...
user avatar
5 votes
2 answers
669 views

Fuzzing and its impact on testing environment

I asked this question on StackOverflow but got no answers so I thought that I would try my luck here since fuzzing is closely related to security and often used in vulnerability assessment tests. I'm ...
user avatar
0 votes
1 answer
166 views

How to change the expiration time for the pkcs certificate?

I have an application (which I'm testing), in which I create some services. These services are accessible via libraries i.e java and python apis. In order to authenticate the api calls, the ...
user avatar
  • 101
1 vote
1 answer
1k views

Are there approaches/mechanism to detect hardware backdoors?

Background: A nice Chinese based manufacturer (AllWinner Technology Co.Ltd) produces very useful SoC used boards that often claim to be open source hardware. Question: If need be is there by way of ...
user avatar
29 votes
6 answers
3k views

How can security audits be integrated into an agile project?

If we give a security auditing company a working system, and ask them to audit it, and only do that once during a project because it's expensive, this is basically waterfall. How can security ...
user avatar
2 votes
1 answer
1k views

How can I hide proprietary elements of test data in tests that are automatically run?

I am writing automated tests for a web application that will be run periodically over night, and I am running into a moderate security issue. In order to make the tests thorough, I am hoping to ...
user avatar
  • 123
0 votes
1 answer
973 views

Looking for Wepawet-like open source alternative [closed]

Is there any open source alternative to Wepawet ? I need to study techniques of JavaScript malware detection.
user avatar
1 vote
2 answers
145 views

Automatic vs Manual

When it comes to technologies that directly affect information security, how do you determine when it is better to use an automatic option instead of a manual option, and vice versa? I already feel ...
user avatar
  • 535
2 votes
1 answer
1k views

ARM TrustZone with Normal and Secure World

I am new to Security testing and I am working on a 64-bit ARM server. We are using ARM TrustZone technology. Is it possible for me to check if I am in the Secure world or the Normal world? How do I ...
user avatar
  • 121
5 votes
4 answers
3k views

Effectiveness of Interactive Application Security Testing

There are a number of IAST tools available on the market such as Acunetix Web Vulnerability Scanner and HP WebInspect Real-Time. How effective are these at finding vulnerabilities? Is there any ...
user avatar
5 votes
3 answers
6k views

CentOS for security testing?

I am a QA Engineer, but have been tasked with creating a security testing platform. I have many years with Backtrack/Kali and my primary OS are Arch and Ubuntu. The Systems guys here gave me a CentOS ...
user avatar
1 vote
3 answers
1k views

What is best method for retest blind sql vulnerability

I tested web site application with commercial automated tool.There are some blind sql injection.I want to retest this results .Is there any good method for test blind sql injection with tool or ...
user avatar
  • 124
3 votes
1 answer
206 views

Test suite for a white-box fuzzer

I have created a white-box fuzzer by extending the Crest. Now, I'm looking for a test suite (a set of c programs with known vulnerabilities) to test the functionality of my tool. where i can find ...
user avatar
  • 141
18 votes
4 answers
8k views

Is there a tool to rate browser TLS/SSL configuration?

I am looking for a tool to rate the configuration of SSL/TLS settings in the browser. I have found a few sites that enumerate supported ciphers and the preferences but none of them seem to provide ...
user avatar
  • 336
5 votes
2 answers
9k views

SQL Injection - Extracting database data from the page content

I have a question I am hoping someone could help with.. I am in the process of writing an SQL Injection tool from scratch (I am aware there are already excellent tools out there such as SQL Map, but ...
user avatar