Common Web Application Vulnerabilities (Top 5 Vulnerabilities) --- Web Security Testing

1) Authentication & Authorization ===================== One of the biggest web application weaknesses is the failure to provide a means of strong authentication to verify the end user is who they claim. Prior to accessing a web application, a server may require the end user to authenticate themselves to identify the user or to determine the user`s access privileges. Without such authentication employed, attackers could access to another user`s account, view sensitive information or perfor...
Submitted by Kaushik | Rated 0

12 Best Cross Browser Testing Tools to Ease Your Browser Compatibility Testing Efforts

Cross Browser Testing can be the biggest pain for Software testers. But thanks to all cross browser testing tools available online which help to minimize testing efforts. I’ve written this post mainly for software testers but designers can also refer crossbrowser testing methods and tools mentioned in this post. Here’s a handy cross browser testing checklist you can refer while testing your web project on different browsers and operating systems: 1) CSS validation 2) HTML or XHTML ...
Submitted by Raj | Rated 0

Its defect speaking

I am defect. For some people I am a mild inconvenience and for some I am their worst nightmare, probably a life threatening nightmare. For many years, people like you have treated me as a hunting target and treated me as a non-living entity - without any emotion, say or dreams. Till now, I kept my silence but now I had it enough and I have to tell the story. You call me so many names (And all of them are bad BTW), but do you know anything at all about me? Do you know where I lived before you ...
Submitted by Rohit | Rated 0

Why I am a tester? Wrong Reasons

We have seen many discussions on why people came into software testing and why they still love to work as a tester. People have interesting reasons, for some people its creativity, for some people its challenges of automation, for some its relation to system thinking, domain expertise etc. All of these are good reasons to be in testing field and if you are in testing because of similar reasons, probably you are enjoying your work and may be exciting people around you about testing. Unfortun...
Submitted by Rohit | Rated 0

What is Not Software Testing? - Exploring Myths

Software testing is a relatively new field and has changed considerably in past few years. It is not taught in many universities and when I moved from development to testing in 2001, I was confused about it. I tried to learn from internet, books, forums and was not impressed with the information I got. I even did my certification (CSTE, if you are interested) but that wasn`t very useful either. During that time, I came across many interesting theories / concepts and after working in the industry...
Submitted by Rohit | Rated 0

Some Testing Definitions

The purpose of a test completion criteria is to determine when to stop Testing. For arrriving at this criteria the following points are to be satisfied. 1. All the Test Cases are executed. 2. All the Defects are retested and closed and corresponding Regression test cases are executed. 3. Only a minimal chances of getting error or defect. 4. Once the deadline have reached. (In this case after the deadline also the system is not stable then it should be approved by the management.) 5. All t...
Submitted by Manideepa | Rated 0

ISTQB Questions-2

21 Given the following types of tool, which tools would typically be used by developers and which by an independent test team: i. static analysis ii. performance testing iii. test management iv. dynamic analysis v. test running vi. test data preparation a) developers would typically use i, iv and vi; test team ii, iii and v b) developers would typically use i and iv; test team ii, iii, v and vi c) developers would typically use i, ii, iii and iv; test team v and vi d) developers woul...
Submitted by Manideepa | Rated 0

ISTQB Questions

1 When what is visible to end-users is a deviation from the specific or expected behavior, this is called: a) an error b) a fault c) a failure d) a defect e) a mistake 2 Regression testing should be performed: v) every week w) after the software has changed x) as often as possible y) when the environment has changed z) when the project manager says a) v & w are true, x – z are false b) w, x & y are true, v & z are false c) w & y are true, v, x & z are false d) w is true, v, ...
Submitted by Manideepa | Rated 0

Penetration Testing

A penetration test is a method of evaluating the security of a computer system or network by simulating an attack from a malicious source, known as a Black Hat Hacker, or Cracker. The process involves an active analysis of the system for any potential vulnerabilities that may result from poor or improper system configuration, known and/or unknown hardware or software flaws, or operational weaknesses in process or technical countermeasures. This analysis is carried out from the position of a pote...
Submitted by Rohit | Rated 0

Exception handling in Software testing

Exception handling is a programming language construct or computer hardware mechanism designed to handle the occurrence of some condition that changes the normal flow of execution. For signaling conditions that are part of the normal flow of execution see the concepts of signal and event handler. Exception or error handling refers to the anticipation, detection, and resolution of programming, application, and communications errors. Specialized programs, called error handlers, are available fo...
Submitted by Rohit | Rated +1