No Automated Testing

 This is the second selenium and security testing video in series of Security Testing and Selenium . This video cover active scanning using ZAP and selenium

I have come across many articles which talk of carrying out security testing with selenium however I found it very cumbersome to set up such tests. This is what this tutorial is going to make easy for you. My next Security Testing and Selenium YouTube video covers following - Importance of having security testing on CI What is dynamic application security testing Recommended tools from https://owasp.org/www-community/Vulnerability_Scanning_Tools What is https://owasp.org/ ?   Using https://www.zaproxy.org/    Project setup  <dependency> <groupId> org.zaproxy </groupId> <artifactId> zap-clientapi </artifactId> <version> 1.9.0 </version> </dependency> <dependency> <groupId> org.zaproxy </groupId> <artifactId> zap </artifactId> <version> 2.10.0 </version> </dependency> Start ZAP daemom (headless) mode  ./zap.sh -daemon -host 127.0.0.1 -port 8080 ...

Courtesy - GOI

If u have not yet seen this! Google labs is offering a sample application with security vulnerabilities. I have just started browsing through and its very interesting. More interesting for some one who is new to Security Testing. Website is available here and open to all for hacking with tips and tricks provided by none other than Google itself.