Security Testing

What is Security Testing?

// the goals, scope, and types of security testing every qa engineer should know.

OWASP Top 10 Overview

// the ten most critical web application security risks — explained for testers.

SQL Injection

// how sql injection works, how to test for it, and why it is still the top attack vector.

Cross-Site Scripting (XSS)

// stored, reflected, and dom-based xss — how to detect and test for each.

Broken Access Control

// the #1 owasp risk — testing that users can only access what they are authorized to.

Authentication Testing

// testing login flows for weak passwords, brute force, session fixation, and more.

API Security Testing

// owasp api top 10 — the most critical vulnerabilities in rest apis.

Sensitive Data Exposure

// testing for pii leakage, insecure storage, and unencrypted data transmission.

Security Testing with OWASP ZAP

// using zap to scan web applications for vulnerabilities — beginner guide.

Security Testing Checklist

// a practical checklist to verify security across authentication, api, and data layers.