Security Testing with Selenium - OWASP ZAP Integration

No video

Security Testing with Selenium - OWASP ZAP Integration

Рет қаралды 26,488

Күн бұрын

In this video, I have explained how to perform security testing and generate security vulnerability report using ZAP Proxy Java Client.
Security Testing with Selenium - OWASP ZAP Integration
Schedule a meeting in case of any queries/guidance/counselling:
calendly.com/n...
~~~Subscribe to this channel, and press bell icon to get some interesting videos on Selenium and Automation:
www.youtube.co...
Follow me on my Facebook Page:
/ naveenqtpexpert
Let's join our Automation community for some amazing knowledge sharing and group discussion on Telegram:
t.me/joinchat/...
Naveen AutomationLabs Paid Courses:
GIT Hub Course:
naveenautomati...
Java & Selenium:
naveenautomati...
Java & API +POSTMAN + RestAssured + HttpClient:
naveenautomati...

Пікірлер: 51

@umamvj53 5 ай бұрын

Thank you so much Naveen🎉,i was trying to do the poc in my org,this video was a saviour for me , you have been phenomenal in helping the QA professionals accross globe ,keep going 👏

@m.umerhuzaifa5285 11 ай бұрын

GREAT WORK DONE. It was extremely helpful. Thank you very much sir.

@ranaindiavlogs9943 2 жыл бұрын

We appreciate your efforts on sharing this session, there are many things which you have missed and should part of this demo like spidering, passive and active scanning. You should have choose some live example which describe about capturing Xss, sql injection issues and how to replicate them manually in appliancation. There could be more discussion around handling login owsap token in zap plugin as most of application use token based login to secure application. Trust me developer wil entertain you only if you are reporting cross site scripting, sql injection issues in application ,those issues you have shown in report are common and does not have serious threat to the application.

@naveenautomationlabs 2 жыл бұрын

As I mentioned this is just a demo with selenium integration. I have not explained about various features of zap and security testing, which is out fo scope for this video. In one single video, can’t cover complete security scenarios.

@ranaindiavlogs9943 2 жыл бұрын

@@naveenautomationlabs That's fine, no problem. Respect for your all contributions to testing community. Keep going. 🙏🙏

@neegee6252 10 ай бұрын

Hi @ranaindiavlogs9943 , Is there any other tutorial you would like to suggest for the detailed explanation? Also, do you know any github project which can be referred. Thanks

@ranaindiavlogs9943 10 ай бұрын

@@neegee6252 sure I will check and confirm you , allow me some time please

@maliequizhu6614 Жыл бұрын

Thanks for your excellent presentation 👍👍👍 this is really helpful❤️❤️❤️

@ranaindiavlogs9943 2 жыл бұрын

Thanks to sharing this video. We recently implemented owsap zap plugin in our automation framework. It assisted us a lot of catching cross site scripting and sql injection issues.

@sunjitkumar7082 2 жыл бұрын

Hi Rana, did u implemented it on every page

@ranaindiavlogs9943 2 жыл бұрын

@@sunjitkumar7082 yes, of course, we have integrated owsap zap with regression. Each release with regression, security test also runs.

@sunjitkumar7082 2 жыл бұрын

Is it possible for you to share the repo? We want to implement it in our automation framework

@ranaindiavlogs9943 2 жыл бұрын

@@sunjitkumar7082 it is integrated in my organization project so it is not possible to share.. But i have separate demo for selenium and OWSAP, I will add a repo in git hub and will share with you in 1 or 2 days.

@manikantan2457 2 жыл бұрын

@@ranaindiavlogs9943 could you kindly update the link .

@ajaysuresh3781 2 жыл бұрын

Thanks Naveen for posting. Very Informative tutorial on OWASP ZAP

@nealbangia147 2 жыл бұрын

Thank you sir i am seriously searching security testing and you helped me a lot

@its_me_anjii 2 жыл бұрын

Thank you Naveen for sharing such a good knowledge...really appreciated..thank you so much.

@supunjayasiri2955 8 ай бұрын

This is really amazing! Thanks alot Naveen. Can you please tell me what are the other security tests we can automate to be an industry standard automation project? Thanks again..

@rashid9040 2 жыл бұрын

Wonderful content. Thank you Naveen sir😊😊

@rameshjinaga8149 2 жыл бұрын

Thanks naveen for the video Have a query not related to this topic Can we automate elements inside embed tag??

@nealbangia147 2 жыл бұрын

@naveen sir please can you add more videos related to security testing with selenium like how we do SQL injection etc

@krishnapandit6175 2 жыл бұрын

Much waited one..... Thanku so so much 😊

@adewale3157 2 жыл бұрын

I really appreciate your efforts and time on sharing this session with us. However, you have not share the session on your github space. Many thanks.

@user-ew7tg2ki9n 5 ай бұрын

very great video

@pramodginuga7048 2 жыл бұрын

Hi Naveen...thank you for providing the video its really well explained...one suggestion...we are not supposed to use public websites without Authorization where you can scan the website.....either use your own app or something which is running in local

@kyledrewes6552 Жыл бұрын

Hi, do you have any videos showing how to create a maven project ? I'm having some difficulties on how to add the dependency from 2:32. Thank you

@ppayani1 2 жыл бұрын

Hi Naveen- thanks for this tutorial. Do we need to keep the ZAP app open when running our testNG test? if so, can u please explain the reason. Thanks in advance.

@abhisheksarkar1515 Жыл бұрын

Hi Naveen, thanks for the video.Can we do the same using Selenium with C#.

@ProjectAryawarta Жыл бұрын

Does it navigates to all the sub pages or only scanning the index page?

@dipanmajumder8606 2 жыл бұрын

@Naveen sir,Can you please make a video on how we can change the request or response with zap with the help of selenium

@abhisheksarkar1515 Жыл бұрын

Use active scan with api.ascan method

@debasishsingh8500 2 жыл бұрын

Please make security testing videos on API also.

@sagars3332 2 жыл бұрын

Hi Naveen, bro why we are creating proxy class instance here??

@agamya9191 Жыл бұрын

@naveeen :Can you suggest any security tool for desktop app

@tejashreekadam1838 2 жыл бұрын

Hi Naveen...I am getting session not created This version of chromedriver only supports chrome version ...what needs to do to resolve this

@mnagamani9102 2 жыл бұрын

what type of test cases we can test as part of security??

@MM-me1bj 2 жыл бұрын

Is it good to add security testing skill with selenium Java

@balachanderpandiyan8920 2 жыл бұрын

Hi Naveen Sir. I am not able to do same with firefox browser. Can you please guide me

@sathyanarayananbaskaran3808 Жыл бұрын

Hi naveen, I could not perform any action on the element when integrated with zap. Getting element not found exception.. Can you please help?

@abhisheksarkar1515 Жыл бұрын

Disable HUD functionality from ZAP software

@user-ch2kf8cu6e 10 ай бұрын

can i get the code of the video?

@manikantan2457 2 жыл бұрын

@naveen Sir Same code i was practicing able to see below error Report is not generated could you please let me know the cause. org.zaproxy.clientapi.core.ClientApiException: Does Not Exist

@chrispaquette5078 2 жыл бұрын

Same problem

@chrispaquette5078 2 жыл бұрын

Change the report type to traditional-html-plus

@umamvj53 5 ай бұрын

@@chrispaquette5078 Thank you so much,I had spent 2 days to find the solution 😂even chatgpt didn't help

@balwanbiradar547 5 ай бұрын

naveen Sir Same code i was practicing able to see below error Report is not generated could you please let me know the cause. org.zaproxy.clientapi.core.ClientApiException: Does Not Exist

@umamvj53 5 ай бұрын

@balwanbiradar547 - even i am facing same issue ,did you get the solution ? can you please respond