Archive
Browse older posts.
Explains how to leverage existing automated functional tests (Selenium, Rest-Assured) by running them through a local proxy (JMeter, Burp, ZAP etc.) to capture traffic, which can then drive security scanning, performance testing, and exploratory testing efforts.
Read more: How to use automated functional tests to drive your exploratory, security and performance testing efforts?Introduces WireMock for stubbing HTTP dependencies in isolated API testing, explaining Maven/JUnit setup and demonstrating how to define stubs for GET/POST requests matching URL, headers, and body, using Rest-Assured for client requests.
Read more: Get rid of your external dependencies with WireMockDraws productivity lessons by contrasting tips from the declassified CIA Simple Sabotage manual, advocating for empowered decision-making, failing fast, prioritizing, avoiding useless meetings, continuous improvement, and knowledge sharing, with applications to software testing.
Read more: What CIA teaches us about productivityExplains how to automate Reflected Cross-Site Scripting (XSS) tests using Selenium, covering disabling Chrome's XSS auditor, implementing a Page Object for a vulnerable page (XSS Game Level 1), injecting a script payload, and asserting if an alert appears.
Read more: Automate your XSS tests with SeleniumExplains the shift from Firefox Profiles to FirefoxOptions/DesiredCapabilities for configuring Firefox in Selenium, aligning it with Chrome's approach. Covers GeckoDriver setup and demonstrates setting capabilities like insecure certs acceptance, preferences, and log level.
Read more: Firefox Selenium Browser Capabilities explained