Questions tagged [automated-testing]

Test automation is the use of software to control the execution of tests, the comparison of actual outcomes to predicted outcomes, the setting up of test preconditions, and other test control and test reporting functions. Commonly, test automation involves automating a manual process already in place that uses a formalized testing process (wikipedia.org).

Filter by
Sorted by
Tagged with
1
vote
0answers
31 views

Auto-login to refresh token in Burp Suite 2

I want to run an automatic scan on a web application made with Angular and JSNode. On this one I have access to different types of accounts. On ZAP OWASP I can select the POST request, it detects the ...
-3
votes
1answer
95 views

How am I supposed to check Defender's capability when it trusts me blindly after I mark a test malware file as “allowed”?

With enormous amounts of fighting with Windows/Microsoft Defender, I finally managed to download the "test virus" file from https://www.ikarussecurity.com/en/private-customers/download-test-...
0
votes
1answer
74 views

QR Code Security Testing [closed]

Within the scope of a project for my client, I test the existing site and the project for security vulnerabilities using OWASP ZAP. The client uses invitations with QR Codes and QR Codes to login to ...
1
vote
0answers
35 views

performing authenticated scan for xss using selenium and xsstrike tool

I'm automating XSS security test, I automated XSS reflected and stored, now for automating XSS dom I'm required to use XSSStrike tool (https://github.com/s0md3v/XSStrike/wiki/Usage). Im using ...
0
votes
0answers
27 views

configuring output of testssl for testing ciphers

I'm writing a script in python to automate cipher check using testssl.sh tool. the output JSON presents { "id" : "service", "ip" : "ad4screen.com/130....
0
votes
1answer
87 views

How to check/test security issues of freeware?

My company is implementing software whitelisting processes. There are bunches of freeware needing security testing. Actually, it just requires a preliminary evaluation rather than a deep analysis. ...
1
vote
0answers
68 views

How to configure webapplication vuln scanner for local web apps [closed]

I am in the process of evaluating a number of webapp vuln scanners. For this task, I attack intentionally vulnerable web apps. So far I tried: Scanner > BurpPro Scanner, arachni, ZAP, wapiti, nikto, ...
1
vote
1answer
321 views

Using Selenium to automate data entry

We have a report that generates ~100 rows daily and our customers have to enter the data into third-party software. We hoped that the software allows some kind of data upload so that our customers don'...
0
votes
1answer
114 views

Adding Floating point operations to fuzzing?

During analysing a software testing paper I read We plan to add floating-point operations in order to extend fuzz testing capability. What kind of benefits I can expect from adding floating point ...
2
votes
0answers
58 views

Analyzing binary by ZZUF and PEACH fuzzers

I have installed two different fuzzer ZZUF and PEACH fuzzers. Unfortunately, my lack of knowledge I could not test C++ binaries by both fuzzers. Testing binaries process is not given PEACH and ZZUF ...
1
vote
1answer
36 views

Criteria for selecting fields and network protocols for fuzzing

I want to test a specific device connected to different networks using fuzzing. For each network interface, there are different services listening using different protocols, with open specification. ...
1
vote
0answers
49 views

What makes detection of optimized-away memory clearing non-trivial?

In this 35C3 talk, it is said that while it is possible to manually inspect whether a package optimizes away memset() that clears sensitive memory, doing it automatically would be challenging. ...
7
votes
1answer
15k views

Security scan result - Server leaks inodes via ETags

After automated scan on my web application I have the result that "Server leaks inodes via ETags, header found with file /icons/README, fields: 0x16a4 0x438c0000000". I've read about ETags but I don'...
7
votes
3answers
1k views

Continuous SQL injection testing

We have a set of internal Python/Django web applications that are pretty well tested functionality-wise, but from time to time we do discover vulnerabilities and, specifically, places where SQL and ...
-1
votes
1answer
321 views

Can I perform a local test for DNS leaking?

I want to test that the connection from my local machine to my VPN is set up correctly, specifically that I do not have DNS leaks. I am aware of web-based tools like dnsleaktest.com but they aren't ...
1
vote
2answers
756 views

How to test the security of a hardened Web Browser?

I want to actually test the security of a sandboxed and hardened web browser after I implemented 3rd party security tools that claim to harden the browser. So how can I or what approach should I ...
1
vote
1answer
684 views

Host Testing Automation in Kali using Python [closed]

I posted the following question link on stack overflow and it was pointed out that I should possibly forward it to security exchange. For convenience the question is re-iterated below: I started ...
4
votes
1answer
12k views

How to test for NoSQL injections?

How to test for NoSQL injections? Considering that the structure (or actually the non-structure) of NoSQL databases is very different from structured databases like MySQL, MSSQL or PostgreSQL. Are ...
1
vote
0answers
49 views

Firewall rulebase analysis offline/vendor agnostic a thing for FISMA/NIST

During design-time before a build-out, I currently create an excel file version of a firewall rulebase (policy) representing source/target/port/protocol/etc definitions before being pushed to the ...
5
votes
0answers
140 views

Fuzzing services? [closed]

Are there any softwares/solutions with we can just: Download, start a binary/shell script And it will automatically start to fuzz ex.: the Linux kernel, like ex.: syzkaller? But if it would found ...
4
votes
1answer
146 views

Automated Malware Analysis Tools as a standalone

I am in search of automated malware analysis tools in order to list and evaluate/benchmark, but I can't find solutions that work as a standalone. Most of what I found is online or requires buying a ...
11
votes
1answer
553 views

Did DARPA's Cyber Grand Challenge winner actually discover previously unknown vulnerabilities?

DARPA announced a winner on August 4, 2016 of its Cyber Grand Challenge DARPA Cyber Grand Challenge. The contest was described as designed to accelerate the development of advanced, autonomous ...
1
vote
2answers
414 views

What phases does a network penetration test consist of?

What are common phases of a network infrastructure penetration test? Staring with discovering IP's and ports? A simple vulnerability assessment, checking version information of banners from different ...
13
votes
4answers
11k views

How to perform a proper DDoS test in a safe and controlled way?

What is the proper and safe way to perform a DDoS test without crashing the whole infrastructure? What different types of DDoS attacks are there and what things should be considered performing such a ...
4
votes
2answers
217 views

Use of automated security testing tools in the industry

I read this article about the 10 year old Finnish boy collecting a $10,000 bug bounty from Instagram with interest. According to the article (and I hope someone can shed more light on the exact ...
1
vote
2answers
40 views

Assuming existence of sufficient number of benign inputs?

I have come across multiple machine learning based security solutions that train their detectors/models using "benign" inputs. The assumption is that the operator has access to sufficiently ...
5
votes
2answers
8k views

Penetrate Testing Java Web Applications

First thing first; this is something I have never done before. I have a web application written in Java (JSP and Servlet) and use MySQL as the database. Application is deployed in Amazon EC2, an ...
5
votes
1answer
1k views

Automatically enumerate missing patches on penetration test

Nessus, when running a credentialed scan can check patch levels and return vulnerabilities when a package is one that hasn't been updated to the latest, non-vulnerable version. What is a good way of ...
3
votes
3answers
942 views

ASV scanning scope

My organisation has 200+ websites each with an assigned IP address, these IP addresses evaluate to a pair of load balancers. Behind these are a firewall and then 8 application servers behind this, all ...
1
vote
0answers
478 views

Tools for finding stored XSS vulnerabilities, given DB write access? [closed]

I'm aware that there are various tools for testing for XSS vulnerabilities. However, all the ones that I'm aware of (Vega, possibly BeEF, etc.) operate purely client-side. When testing for stored XSS ...
1
vote
1answer
122 views

Any standard tests to prevent hacking? [closed]

I am very new in programming world so my question may sound weird. I am useing selenium to test an application, yesterday one of my colleagues found this issue that if someone enters this: <script ...
1
vote
1answer
2k views

OAuth2 Authorization and Resource Server security check

I'm about to launch a web api using OAuth2 for authentication (authorization code, implicit and client credentials flows). The protocol is implemented using the DotNetOpenAuth v4.3 library. Although a ...
1
vote
0answers
155 views

Pathping for test Pinging from subnets

Does anyone know if PathPing or NMAP can ping or scan from predefinded source IPs? I am checking connectivity from agents on remote hosts to a destination site from my host. Is there a switch or tool ...
4
votes
2answers
570 views

Fuzzing and its impact on testing environment

I asked this question on StackOverflow but got no answers so I thought that I would try my luck here since fuzzing is closely related to security and often used in vulnerability assessment tests. I'm ...
0
votes
1answer
101 views

How to change the expiration time for the pkcs certificate?

I have an application (which I'm testing), in which I create some services. These services are accessible via libraries i.e java and python apis. In order to authenticate the api calls, the ...
0
votes
1answer
816 views

Are there approaches/mechanism to detect hardware backdoors?

Background: A nice Chinese based manufacturer (AllWinner Technology Co.Ltd) produces very useful SoC used boards that often claim to be open source hardware. Question: If need be is there by way of ...
29
votes
6answers
3k views

How can security audits be integrated into an agile project?

If we give a security auditing company a working system, and ask them to audit it, and only do that once during a project because it's expensive, this is basically waterfall. How can security ...
2
votes
1answer
1k views

How can I hide proprietary elements of test data in tests that are automatically run?

I am writing automated tests for a web application that will be run periodically over night, and I am running into a moderate security issue. In order to make the tests thorough, I am hoping to ...
0
votes
1answer
898 views

Looking for Wepawet-like open source alternative [closed]

Is there any open source alternative to Wepawet ? I need to study techniques of JavaScript malware detection.
1
vote
2answers
109 views

Automatic vs Manual

When it comes to technologies that directly affect information security, how do you determine when it is better to use an automatic option instead of a manual option, and vice versa? I already feel ...
2
votes
1answer
1k views

ARM TrustZone with Normal and Secure World

I am new to Security testing and I am working on a 64-bit ARM server. We are using ARM TrustZone technology. Is it possible for me to check if I am in the Secure world or the Normal world? How do I ...
5
votes
4answers
3k views

Effectiveness of Interactive Application Security Testing

There are a number of IAST tools available on the market such as Acunetix Web Vulnerability Scanner and HP WebInspect Real-Time. How effective are these at finding vulnerabilities? Is there any ...
5
votes
3answers
6k views

CentOS for security testing?

I am a QA Engineer, but have been tasked with creating a security testing platform. I have many years with Backtrack/Kali and my primary OS are Arch and Ubuntu. The Systems guys here gave me a CentOS ...
1
vote
3answers
869 views

What is best method for retest blind sql vulnerability

I tested web site application with commercial automated tool.There are some blind sql injection.I want to retest this results .Is there any good method for test blind sql injection with tool or ...
3
votes
1answer
164 views

Test suite for a white-box fuzzer

I have created a white-box fuzzer by extending the Crest. Now, I'm looking for a test suite (a set of c programs with known vulnerabilities) to test the functionality of my tool. where i can find ...
17
votes
4answers
8k views

Is there a tool to rate browser TLS/SSL configuration?

I am looking for a tool to rate the configuration of SSL/TLS settings in the browser. I have found a few sites that enumerate supported ciphers and the preferences but none of them seem to provide ...
5
votes
2answers
8k views

SQL Injection - Extracting database data from the page content

I have a question I am hoping someone could help with.. I am in the process of writing an SQL Injection tool from scratch (I am aware there are already excellent tools out there such as SQL Map, but ...
4
votes
2answers
2k views

SQL Injection - Automating the fingerprinting of the DBMS

I have a problem I'm hoping someone could help with regarding the fingerprinting of the DBMS using sql injection, in a scripted/automated way to accurately and reliabling determine the DBMS. I am in ...
6
votes
1answer
10k views

SQL Injection - UNION SELECT and returning a 'keyword' to find exploitable columns

I have a problem I'm hoping someone could help with regarding the use of UNION SELECT, in a scripted/automated way to find columns that are exploitable (having already found the number of columns ...
0
votes
1answer
1k views

Automating tests for XSS in bash?

The book:"Web Security Testing Cookbook By Paco Hope, Ben Walther" is the only source I could find which covers the topic. They use cURL. I just want to write some scripts to automate testing for xss....