Interactive Analysis Security Testing

Good Article to explain IAST


Static and Dynamic Scanner to detect, in development

Use tools to attack in operations. 





Comments

Post a Comment

Popular posts from this blog

My review of EuroSTAR 2015 - Maastrict

Image
There are lot of great talks in EuroSTAR 2015.  I was really enjoy it, as well as the city Maastricht. Tidy, charming city with history, gourmet and exclusive shopping :) There are a few hot words into my ears. Autonomous management , self steer group.  DevOps is all about communication, collaboration, transparency.   Always start with WHY, follow with WHAT then HOW Continuous learning is the way to survival for tester.   Dedicate team, Automation in Agile.  Small team with B ig goal, leads to -> disruptive .  ************************************************************************** DevOps: My feel of DevOps is Collabration and Communcation.  To achieve efficiency, TA should be communication with different parities, get the needs from them ,and make the things happen. Open mind and fearless. [TU4].  Continuous Delivery means Continuous  Testing , but not means Continuous  Deployment  [TU4]. Communication ...
Read more

Small summery of ElasticSearch meetup

https://www.elastic.co/guide/en/elasticsearch/reference/current/_basic_concepts.html https://en.wikipedia.org/wiki/Document-oriented_database Configuration (a.k.a Design) matters a lot. Big performance impact to user. Design the configure based on the query pattern of users. Dual scoring model :  Bool query && ?? Shingles , 类似有pairwise，把一个句子里面的单词(token)没连续两个分组，比如 Hello the beautiful world -> [Hello the], [the beautiful], [beautiful world] Kopf:  https://github.com/lmenezes/elasticsearch-kopf, web admin page for elesticsearch
Read more

Online Test Tools

Browser http://getfirebug.com/ https:/ /www. wireshark. org/ Test Generation http://textmechanic.com/Permutation-Generator.html Security http://www.opensourcetesting.org/security.php http://packetstormsecurity.com/files/tags/tool/ https://www.owasp.org/index.php/Appendix_A:_Testing_Tools https://highon.coffee/blog/penetration-testing-tools-cheat-sheet/ https://dzone.com/articles/security-testing-tools-you-need-to-know-about Test Data http://www.generatedata.com/# t1 C# pluralsight-training.net  training http://www.pluralsight- training.net/microsoft/Courses   http://freeworld.thc.org/root/ phun/unmaintain.html http://silverlightchina.net http://phonegap.com/ jet brains , ants profiler, check code performance
Read more