Overview
Syllabus
Intro
Mr Roboto
Why Security Unit Testing
Flaws not exploits
Quantum Security BOTS
Agenda
Current Security Tools
Static Tools
Dynamic Tools
Weaknesses
Costs
UnitTesting Frameworks
Average Number of UnitTesting
Lack of UnitTesting
Java Spring
NET
Django
Summary
Testing frameworks
Inoculating the application
Functional application
Authentication state
Consistent responses
Accessing HTML
Lessons Learned
Math is Hard
Developers Know Better
Identifying End Points
Chuck Norris
Sputter
Security payloads
Storytime
Admin Code
Single Character
XSS payloads
Encoding problems
Popup button
Random characters
Regice expression
Demo
Test Generation 4
Taught by
Black Hat