Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Favorites infavorites:mine
infavorites:1234
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with Search options user 11015

Security testing is a process to determine that an information system protects data and maintains functionality as intended.

3
votes
Use Fiddler to inspect network traffic. In addition to clear text passwords you can try to reuse a session token by making a call using Fiddler or PostMan. Also, checkout OWASP's ZAP scanner.
answered Nov 24 '15 by kirbycope
2
votes
You'll find OWASP to be a great resource for security/penetration testing. Start here for iOS.
answered Feb 6 '15 by kirbycope
2
votes
OWASP is for the web, it is in the name. For desktop applications, the only one I know of is IBM Security AppScan. A scanner is not going to find everything. The best thing is hiring a professional. A …
answered May 10 '17 by kirbycope
3
votes
ISO 25010 is an updated revision of ISO 9126. Security is considered non-functional.
answered Jun 2 '15 by kirbycope
0
votes
From what I understand, you have two options: If it's a local instance of reCaptcha, then you can look up the image ID in the database to find the code it's tied to. http://www.softwaretestingclub …
answered Mar 13 '15 by kirbycope
2
votes
A lot of stuff covered by OWASP applies to applications as the line between desktop app and web app blurs. Things like SQL injection, command injection, object injection to name a few injection attack …
answered Jun 29 '17 by kirbycope