We’re rewarding the question askers & reputations are being recalculated! Read more.

Questions tagged [security-testing]

Security testing is a process to determine that an information system protects data and maintains functionality as intended.

Filter by
Sorted by
Tagged with
23
votes
8answers
691 views

Security testing resources

Can anyone recommend any good security testing resources? Although I have a basic security skillset, I'd like to improve this. Some of the training I've seen online however seems kind of sketchy. ...
16
votes
4answers
9k views

How do I test an application for SQL injections?

I'm supposed to test a web application for SQL injections. I'm new to this type of security testing and I'd like to get some tips on the matter. Are there any best practices or do I simply search on ...
12
votes
4answers
35k views

Automation and bypassing Google No CAPTCHA reCAPTCHA

My client want to use Google's No CAPTCHA reCAPTCHA (NCRC) to prevent robots completing an application. QA have automated this process, but if the business introduce NCRC into the form, then this ...
9
votes
5answers
4k views

How to plan security testing of a web application?

Security testing requires thinking out of the box, it noes not have clear test cases, and it is not repeatable, meaning running same set of actions over and over again will never assure security. ...
8
votes
1answer
701 views

Open source web security testing tools

Are there any open source solutions for testing web security vulnerabilities? I am not looking to make my web application bullet proof since it'll be used internally at our organization. But I'd ...
4
votes
5answers
806 views

Best Opensource Tool available for Security Testing of Web applications

I'm on to an R & D task for testing the security vulnerabilities that can happen in a web application. I wants to use an open source tool. There are many type of vulnerabilities like Cross Site ...
7
votes
3answers
12k views

Is it possible to automate testing involving Two-factor Authentication?

Are there methods for testing 2FA signup or login? I would assume judicious use of dummy phone numbers and/or emails would be involved.
15
votes
4answers
1k views

XSS/CSRF security testing

I'm a Java Automated tester for a website built with GWT. My bosses now want me to specialize in security testing. The problem is that nobody in the company knows anything about security testing, ...
9
votes
7answers
336 views

Security testing of web application

I am a manual tester with limited knowledge of how to code. How to approach the security testing of a web site. Are there any good tools/sites/docs/ or classes preferably for security testing where i ...
2
votes
2answers
10k views

Payment gateways checklist

I am now working on payment gateway testing - manual testing- this project has many payments gateways, like credit card and other payments providers like Paypal is there any kind of check list I ...
0
votes
2answers
202 views

Top 10 Web Application Security Checks [closed]

What are the Security checks have to be performed while testing the Web Application. Security Plays an very important role. as Web is an POOL with lack of security we have to use our most of our ...