Security testing training end to end

Question

Hi All&nbsp;Can someone help me with the in detailed training video of Security testing using ReadyAPI ,&nbsp;I have gone through the articles but I couldnt find it helpful&nbsp;

richie · Answer

Hey&nbsp;Jainsoumya&nbsp;
&nbsp;
I can't help with this Im afraid - I havent seen the video
&nbsp;
Cheers,
&nbsp;
Rich

richie · Answer

Hey Jainsoumya,As no one else has come back on this, if you provide the links to the videos and i'll give em a watch and then maybr i can helpCheers,Rich.

jainsoumya · Answer

Hi&nbsp;richie&nbsp;&nbsp;Thank you so much for the helpThe video I found was of API security testing&nbsp;https://www.youtube.com/watch?v=w3vLUVeVT6o&nbsp;I am looking for Web application security testing training video&nbsp;&nbsp;&nbsp;&nbsp;

richie · Answer

Hey&nbsp;Jainsoumya&nbsp;
&nbsp;
ok - I've watched the video - it's a quick presentation to give you the general principles of the vulnerability testing youre able to do in ReadyAPI.
&nbsp;
Are you just trying to learn more about this sort of vulnerability testing or do you have specific questions?
&nbsp;
Unless you actually put it into practice it wont mean much to you - do you actually need to do some vulnerability testing or are you just trying to learn for when you might have to?
&nbsp;
If I wanted to learn this stuff from ReadyAPIs perspective I think the first thing I would do is to have a look at all the different scan types available - e.g. fuzzy matching, cross site scripting, SQL/JavaScript injection, etc., etc. and learn what each of these scans are actually checking for and why.&nbsp; Once you actually know what each of them do - you can then consider your testcases/teststeps in your functional tests and decide which scan types are appropriate to your tests.&nbsp; i.e. as the video indicates - ReadyAPI reuses the functional tests as the basis for the content of vulnerability scans - so say you have json payloads in your functional tests then you wouldnt have any malformed XML scans in your vulnerability tests.&nbsp;&nbsp;
&nbsp;
So - you need to know what each of the scans do to determine if theyre going to be required.
&nbsp;
Does that help at all?
&nbsp;
cheers,
&nbsp;
Rich

Forum Discussion

Security testing training end to end

4 Replies

Recent Discussions

Korean (CJK) characters show as boxes (□) on macOS Apple Silicon in ReadyAPI 4.x

ReadyAPI 4.1.0 issues with groovy "assert" statements

Auth profile does not work with PKCE enabled

Related Content

Test execute training

Test complete Training

Test Complete Keyword Testing Training