Security testing training end to end

Question

Hi All&nbsp;Can someone help me with the in detailed training video of Security testing using ReadyAPI ,&nbsp;I have gone through the articles but I couldnt find it helpful&nbsp;

richie · Answer

Hey&nbsp;Jainsoumya&nbsp;
&nbsp;
I can't help with this Im afraid - I havent seen the video
&nbsp;
Cheers,
&nbsp;
Rich

richie · Answer

Hey Jainsoumya,As no one else has come back on this, if you provide the links to the videos and i'll give em a watch and then maybr i can helpCheers,Rich.

jainsoumya · Answer

Hi&nbsp;richie&nbsp;&nbsp;Thank you so much for the helpThe video I found was of API security testing&nbsp;https://www.youtube.com/watch?v=w3vLUVeVT6o&nbsp;I am looking for Web application security testing training video&nbsp;&nbsp;&nbsp;&nbsp;

richie · Answer

Hey&nbsp;Jainsoumya&nbsp;
&nbsp;
ok - I've watched the video - it's a quick presentation to give you the general principles of the vulnerability testing youre able to do in ReadyAPI.
&nbsp;
Are you just trying to learn more about this sort of vulnerability testing or do you have specific questions?
&nbsp;
Unless you actually put it into practice it wont mean much to you - do you actually need to do some vulnerability testing or are you just trying to learn for when you might have to?
&nbsp;
If I wanted to learn this stuff from ReadyAPIs perspective I think the first thing I would do is to have a look at all the different scan types available - e.g. fuzzy matching, cross site scripting, SQL/JavaScript injection, etc., etc. and learn what each of these scans are actually checking for and why.&nbsp; Once you actually know what each of them do - you can then consider your testcases/teststeps in your functional tests and decide which scan types are appropriate to your tests.&nbsp; i.e. as the video indicates - ReadyAPI reuses the functional tests as the basis for the content of vulnerability scans - so say you have json payloads in your functional tests then you wouldnt have any malformed XML scans in your vulnerability tests.&nbsp;&nbsp;
&nbsp;
So - you need to know what each of the scans do to determine if theyre going to be required.
&nbsp;
Does that help at all?
&nbsp;
cheers,
&nbsp;
Rich

Forum Discussion

Security testing training end to end

Related Content

ReadyAPI Security Test Duration ???

log4j security vulnerability

Customize Security tests

Security Tests Auth Token

[Solved] SSL Handshake exception calling a secure webservice

Recent Discussions

How can we get multiple request and response using upload from files option

Groovy script to access network domain name

ReadyAPI Docker Image COMMAND_LINE -I option is being ignored

AMQP - Cannot connect to ActiveMQ with AMQP Plugin

more screen real estate by moving the Testcase progress bar