In Chapter 5, Security API and Fuzz Testing, we demonstrated how to use JMeter to do fuzz testing with OWASP ZAP. In this chapter, we will demonstrate other techniques using Selenium/ data-driven testing (DDT) and the 0d1n. There is no one solution that fits all testing scenarios. It may depend on the skill-sets of the team, existing testing frameworks, and integration flexibility.
Some key considerations and applied scenarios are listed in this table:
Considerations | Applied scenarios and suggested technical approaches |
Launch a browser |
There are pros and cons to launching a browser for Web UI E2E automation. The key advantage is that it simulates the human behavior for complete E2E testing. However, this kind of testing execution cycle can be time-consuming and prone to error due to Web UI interactions. Both Selenium and Robot... |