Difference between revisions of "Dynamic Application Security Testing"
Jump to navigation
Jump to search
| Line 31: | Line 31: | ||
* [[Manual Penetration Testing]] (MPT) | * [[Manual Penetration Testing]] (MPT) | ||
* {{DAST}} | * {{DAST}} | ||
| − | + | * {{AST}} | |
[[Category:Security]] | [[Category:Security]] | ||
Revision as of 14:40, 3 August 2021
- Cross-site scripting
- Injection: Injection flaws, such as SQL injection, NoSQL, OS, and LDAP injection.
- Path disclosure
- Denial-of-service
- Code execution
- Memory corruption
- Cross-site request forgery
- Information disclosure
- Arbitrary file
- Local file inclusion
- Remote file inclusion
- Buffer overflow
As of 2019 there is no Synopsys DAST on-premises product.
Software
- GitLab Ultimate since January 2018 10.4 https://about.gitlab.com/releases/2018/01/22/gitlab-10-4-released/, https://docs.gitlab.com/ee/user/application_security/dast/
- OWASP ZAP
Related terms
- Application Security Testing (SAST, DAST, IAST): Fortify WebInspect, GitLab Ultimate, flawfinder, Kubesec, Coverity, SonarQube, SCA, Checkmarx
See also
Advertising:
