Questions tagged [automated-testing]
Test automation is the use of software to control the execution of tests, the comparison of actual outcomes to predicted outcomes, the setting up of test preconditions, and other test control and test reporting functions. Commonly, test automation involves automating a manual process already in place that uses a formalized testing process (wikipedia.org).
72
questions
0
votes
1
answer
422
views
Not able to see server response when making request using python
Using the requests library, I am trying to make request to a url. I've set the target to the specific url and checked, "And URL Is in Target Scope" in both Request interception rules and ...
2
votes
2
answers
348
views
What is dynamic code analysis? Is it the same as DAST?
I'm confused a bit between the terms. What I know is that there is SAST and DAST. SAST is scanning code statically for possible vulnerabilities, equivalent to static code analysis. This is usually ...
1
vote
0
answers
80
views
Security testing best practices when opening a project to the community [closed]
I notice that although we have many tools for security tests (SAST, SCA), I couldn't find an open source project on github that implements those tests. I've searched for google, Mozilla, OWASP and ...
- 69
1
vote
2
answers
959
views
Auto-login to refresh token in Burp Suite 2
I want to run an automatic scan on a web application made with Angular and JSNode. On this one I have access to different types of accounts. On ZAP OWASP I can select the POST request, it detects the ...
- 13
-3
votes
1
answer
904
views
How am I supposed to check Defender's capability when it trusts me blindly after I mark a test malware file as "allowed"?
With enormous amounts of fighting with Windows/Microsoft Defender, I finally managed to download the "test virus" file from https://www.ikarussecurity.com/en/private-customers/download-test-...
0
votes
1
answer
372
views
QR Code Security Testing [closed]
Within the scope of a project for my client, I test the existing site and the project for security vulnerabilities using OWASP ZAP. The client uses invitations with QR Codes and QR Codes to login to ...
- 131
1
vote
0
answers
328
views
performing authenticated scan for xss using selenium and xsstrike tool
I'm automating XSS security test, I automated XSS reflected and stored, now for automating XSS dom I'm required to use XSSStrike tool (https://github.com/s0md3v/XSStrike/wiki/Usage).
Im using ...
- 11
0
votes
1
answer
133
views
How to check/test security issues of freeware?
My company is implementing software whitelisting processes. There are bunches of freeware needing security testing. Actually, it just requires a preliminary evaluation rather than a deep analysis.
...
- 123
1
vote
0
answers
268
views
How to configure webapplication vuln scanner for local web apps [closed]
I am in the process of evaluating a number of webapp vuln scanners. For this task, I attack intentionally vulnerable web apps. So far I tried:
Scanner > BurpPro Scanner, arachni, ZAP, wapiti, nikto, ...
- 11
1
vote
1
answer
1k
views
Using Selenium to automate data entry
We have a report that generates ~100 rows daily and our customers have to enter the data into third-party software. We hoped that the software allows some kind of data upload so that our customers don'...
- 111
0
votes
1
answer
270
views
Adding Floating point operations to fuzzing?
During analysing a software testing paper I read
We plan to add floating-point operations in order to extend fuzz testing capability.
What kind of benefits I can expect from adding floating point ...
- 31
2
votes
0
answers
141
views
Analyzing binary by ZZUF and PEACH fuzzers
I have installed two different fuzzer ZZUF and PEACH fuzzers. Unfortunately, my lack of knowledge I could not test C++ binaries by both fuzzers. Testing binaries process is not given PEACH and ZZUF ...
- 31
1
vote
1
answer
94
views
Criteria for selecting fields and network protocols for fuzzing
I want to test a specific device connected to different networks using fuzzing. For each network interface, there are different services listening using different protocols, with open specification.
...
- 145
1
vote
0
answers
94
views
What makes detection of optimized-away memory clearing non-trivial?
In this 35C3 talk, it is said that while it is possible to manually inspect whether a package optimizes away memset() that clears sensitive memory, doing it automatically would be challenging. ...
- 6,534
10
votes
1
answer
28k
views
Security scan result - Server leaks inodes via ETags
After automated scan on my web application I have the result that "Server leaks inodes via ETags, header found with file /icons/README, fields: 0x16a4 0x438c0000000".
I've read about ETags but I don'...
- 1,283
8
votes
3
answers
1k
views
Continuous SQL injection testing
We have a set of internal Python/Django web applications that are pretty well tested functionality-wise, but from time to time we do discover vulnerabilities and, specifically, places where SQL and ...
- 1,585
-1
votes
1
answer
461
views
Can I perform a local test for DNS leaking?
I want to test that the connection from my local machine to my VPN is set up correctly, specifically that I do not have DNS leaks.
I am aware of web-based tools like dnsleaktest.com but they aren't ...
- 3,600
1
vote
2
answers
1k
views
How to test the security of a hardened Web Browser?
I want to actually test the security of a sandboxed and hardened web browser after I implemented 3rd party security tools that claim to harden the browser.
So how can I or what approach should I ...
- 871
1
vote
1
answer
929
views
Host Testing Automation in Kali using Python [closed]
I posted the following question link on stack overflow and it was pointed out that I should possibly forward it to security exchange. For convenience the question is re-iterated below:
I started ...
4
votes
1
answer
14k
views
How to test for NoSQL injections?
How to test for NoSQL injections? Considering that the structure (or actually the non-structure) of NoSQL databases is very different from structured databases like MySQL, MSSQL or PostgreSQL.
Are ...
- 6,427
1
vote
0
answers
102
views
Firewall rulebase analysis offline/vendor agnostic a thing for FISMA/NIST
During design-time before a build-out, I currently create an excel file version of a firewall rulebase (policy) representing source/target/port/protocol/etc definitions before being pushed to the ...
- 131
5
votes
0
answers
185
views
Fuzzing services? [closed]
Are there any softwares/solutions with we can just:
Download, start a binary/shell script
And it will automatically start to fuzz ex.: the Linux kernel, like ex.: syzkaller?
But if it would found ...
- 521
4
votes
1
answer
196
views
Automated Malware Analysis Tools as a standalone
I am in search of automated malware analysis tools in order to list and evaluate/benchmark, but I can't find solutions that work as a standalone. Most of what I found is online or requires buying a ...
- 86
11
votes
1
answer
632
views
Did DARPA's Cyber Grand Challenge winner actually discover previously unknown vulnerabilities?
DARPA announced a winner on August 4, 2016 of its Cyber Grand Challenge DARPA Cyber Grand Challenge. The contest was described as
designed to accelerate the development of advanced, autonomous ...
- 331
1
vote
2
answers
525
views
What phases does a network penetration test consist of?
What are common phases of a network infrastructure penetration test?
Staring with discovering IP's and ports? A simple vulnerability assessment, checking version information of banners from different ...
- 6,427
13
votes
4
answers
15k
views
How to perform a proper DDoS test in a safe and controlled way?
What is the proper and safe way to perform a DDoS test without crashing the whole infrastructure?
What different types of DDoS attacks are there and what things should be considered performing such a ...
- 6,427
4
votes
2
answers
266
views
Use of automated security testing tools in the industry
I read this article about the 10 year old Finnish boy collecting a $10,000 bug bounty from Instagram with interest. According to the article (and I hope someone can shed more light on the exact ...
- 281
1
vote
2
answers
81
views
Assuming existence of sufficient number of benign inputs?
I have come across multiple machine learning based security solutions that train their detectors/models using "benign" inputs. The assumption is that the operator has access to sufficiently ...
- 113
5
votes
2
answers
11k
views
Penetrate Testing Java Web Applications
First thing first; this is something I have never done before.
I have a web application written in Java (JSP and Servlet) and use MySQL as the database. Application is deployed in Amazon EC2, an ...
- 191
5
votes
1
answer
2k
views
Automatically enumerate missing patches on penetration test
Nessus, when running a credentialed scan can check patch levels and return vulnerabilities when a package is one that hasn't been updated to the latest, non-vulnerable version.
What is a good way of ...
- 33.9k
3
votes
3
answers
1k
views
ASV scanning scope
My organisation has 200+ websites each with an assigned IP address, these IP addresses evaluate to a pair of load balancers. Behind these are a firewall and then 8 application servers behind this, all ...
1
vote
0
answers
687
views
Tools for finding stored XSS vulnerabilities, given DB write access? [closed]
I'm aware that there are various tools for testing for XSS vulnerabilities. However, all the ones that I'm aware of (Vega, possibly BeEF, etc.) operate purely client-side. When testing for stored XSS ...
- 2,809
1
vote
1
answer
160
views
Any standard tests to prevent hacking? [closed]
I am very new in programming world so my question may sound weird. I am useing selenium to test an application, yesterday one of my colleagues found this issue that if someone enters this:
<script ...
- 21
1
vote
1
answer
2k
views
OAuth2 Authorization and Resource Server security check
I'm about to launch a web api using OAuth2 for authentication (authorization code, implicit and client credentials flows). The protocol is implemented using the DotNetOpenAuth v4.3 library. Although a ...
- 135
1
vote
0
answers
232
views
Pathping for test Pinging from subnets
Does anyone know if PathPing or NMAP can ping or scan from predefinded source IPs?
I am checking connectivity from agents on remote hosts to a destination site from my host.
Is there a switch or tool ...
- 19
5
votes
2
answers
702
views
Fuzzing and its impact on testing environment
I asked this question on StackOverflow but got no answers so I thought that I would try my luck here since fuzzing is closely related to security and often used in vulnerability assessment tests.
I'm ...
- 199
0
votes
1
answer
314
views
How to change the expiration time for the pkcs certificate?
I have an application (which I'm testing), in which I create some services. These services are accessible via libraries i.e java and python apis. In order to authenticate the api calls, the ...
- 101
1
vote
1
answer
1k
views
Are there approaches/mechanism to detect hardware backdoors?
Background:
A nice Chinese based manufacturer (AllWinner Technology Co.Ltd) produces very useful SoC used boards that often claim to be open source hardware.
Question:
If need be is there by way of ...
- 1,432
29
votes
6
answers
3k
views
How can security audits be integrated into an agile project?
If we give a security auditing company a working system, and ask them to audit it, and only do that once during a project because it's expensive, this is basically waterfall.
How can security ...
- 640
2
votes
1
answer
2k
views
How can I hide proprietary elements of test data in tests that are automatically run?
I am writing automated tests for a web application that will be run periodically over night, and I am running into a moderate security issue.
In order to make the tests thorough, I am hoping to ...
- 123
0
votes
1
answer
1k
views
Looking for Wepawet-like open source alternative [closed]
Is there any open source alternative to Wepawet ? I need to study techniques of JavaScript malware detection.
user45139
1
vote
2
answers
152
views
Automatic vs Manual
When it comes to technologies that directly affect information security, how do you determine when it is better to use an automatic option instead of a manual option, and vice versa? I already feel ...
- 535
2
votes
1
answer
1k
views
ARM TrustZone with Normal and Secure World
I am new to Security testing and I am working on a 64-bit ARM server.
We are using ARM TrustZone technology.
Is it possible for me to check if I am in the Secure world or the Normal world?
How do I ...
- 121
5
votes
4
answers
3k
views
Effectiveness of Interactive Application Security Testing
There are a number of IAST tools available on the market such as Acunetix Web Vulnerability Scanner and HP WebInspect Real-Time.
How effective are these at finding vulnerabilities? Is there any ...
- 33.9k
5
votes
3
answers
6k
views
CentOS for security testing?
I am a QA Engineer, but have been tasked with creating a security testing platform. I have many years with Backtrack/Kali and my primary OS are Arch and Ubuntu. The Systems guys here gave me a CentOS ...
- 151
1
vote
3
answers
1k
views
What is best method for retest blind sql vulnerability
I tested web site application with commercial automated tool.There are some blind sql injection.I want to retest this results .Is there any good method for test blind sql injection with tool or ...
- 124
3
votes
1
answer
211
views
Test suite for a white-box fuzzer
I have created a white-box fuzzer by extending the Crest.
Now, I'm looking for a test suite (a set of c programs with known vulnerabilities) to test the functionality of my tool.
where i can find ...
- 141
18
votes
4
answers
8k
views
Is there a tool to rate browser TLS/SSL configuration?
I am looking for a tool to rate the configuration of SSL/TLS settings in the browser. I have found a few sites that enumerate supported ciphers and the preferences but none of them seem to provide ...
- 336
5
votes
2
answers
9k
views
SQL Injection - Extracting database data from the page content
I have a question I am hoping someone could help with..
I am in the process of writing an SQL Injection tool from scratch (I am aware there are already excellent tools out there such as SQL Map, but ...
- 545
4
votes
2
answers
2k
views
SQL Injection - Automating the fingerprinting of the DBMS
I have a problem I'm hoping someone could help with regarding the fingerprinting of the DBMS using sql injection, in a scripted/automated way to accurately and reliabling determine the DBMS.
I am in ...
- 545