In this chapter, we will use an online shopping site, Hackazon, to demonstrate how to achieve automated web security testing. The key challenge in automating web application testing is walking through the UI business flow while doing a security inspection; for example, using automated testing to look at user sign-in/sign-out, or to add items to shopping carts while scanning for potential cross-site scripting (XSS) injection vulnerabilities for every data input. Tackling this challenge requires not only security scanning but also web UI automation. We will be using security tools, such as ZAP, and also web UI automation frameworks, such as Selenium and Robot Framework. Using both of these tools can effectively improve your security testing coverage. We will share some tips and tools to make web automation easier.
In this chapter, we will cover the...
