Manual testing 44 - Security Testing Checklist | Security Testing guidelines explained

Published: 16 July 2018
on channel: Ankpro Training
5,491
84

Security Testing Checklist | Security Testing guidelines explained
Like our facebook page www.facebook.com/ankprotraining
Security testing :
Testing the authentication of an application to check how will the application is secured from unauthorized users is called Security testing.

Check for major security flaws associated with user authentication
Does logging in involve a two-step verification?
After you’ve logged out, can you access your account without logging in?
Are there ​password rules​ in place an all authentication pages?
Does the password field mask user input?
After you’ve changed the password, can you still log into your account with an old password?
How many times can the user input an invalid password?

Does sensitive data appear in any of the following?
URL.
Error messages of any sort.
Any pages that don’t require a login.
In the source code of the page. If yes, is the ​View Page Source / View Source Code option disabled? ​
Is there any sensitive data stored in cookies?
Is sensitive data of any kind still accessible if some functionality of the app is not working?
Are there traceable log files for storing important information? Does the app update these files as specified?

Does the app use HTTPS / SSL?

Does the app use encryption when handling sensitive data
If there are session values in the address bar, does the app encrypt these values?
Does the app encrypt cookie data?

What happens if you refresh the page or click/tap Back when a transferring sensitive data in mid-progress?

Can the user use your app after the session has expired?

Can a user access the functionality that is only available to other roles?
How does the app handle an SQL injection?


On this page of the site you can watch the video online Manual testing 44 - Security Testing Checklist | Security Testing guidelines explained with a duration of hours minute second in good quality, which was uploaded by the user Ankpro Training 16 July 2018, share the link with friends and acquaintances, this video has already been watched 5,491 times on youtube and it was liked by 84 viewers. Enjoy your viewing!