Introduction to OWASP ZAP | #DevSecOps LIVE

preview_player
Показать описание
📣 In this DevSecOps LIVE Shorts, you’ll learn about OWASP ZAP.

Srinivas will cover Automating security tests using Selenium and OWASP ZAP in this DevSecOps LIVE.

In this intriguing meetup you will learn:

✅ Introduction to automated vulnerability scans and their limitations.
✅ A short introduction to how functional tests can be useful in performing powerful security tests.
✅ Introduction to selenium and OWASP ZAP
✅ Proxying selenium tests through OWASP ZAP
✅ Invoking authenticated active scans using OWASP ZAP
✅ Obtaining scan reports
… and more useful takeaways!

📢 Speaker: Srinivasa Rao Kotipalli
Srinivas, who works for a bank as Red Team member is an Offensive Security Certified Professional(OSCP) and passionate about Information Security. He authored a book titled “Hacking Android”. He worked as Penetration Tester in the past and has hands-on experience in DevSecOps, Container Security, Web Application Security, Infrastructure Security, Mobile Application Security, IoT Security, and Embedded Software Exploit Development (ARM & MIPS). He is one of the authors of FuzzAPI, a REST API vulnerability scanner. He is a speaker at Defcon 26 IoT Village and he delivered several talks and hands-on workshops at regional infosec events in India and Singapore.

📌About Practical DevSecOps:
Practical DevSecOps ​(a Hysn Technologies Inc company) offers vendor-neutral, practical, and hands-on DevSecOps training and certification programs for IT Professionals. Our online training and certifications are focused on modern areas of information security, including DevOps Security, Cloud-Native Security, Cloud Security & Container security. The certifications are achieved after rigorous tests(12-24 hour exams) of skill and are considered the most valuable in the information security field.

👉🏻 Twitter: @PDevsecops
Рекомендации по теме