Practical Security Automation and Testing

NMAP BDD testing with Gauntlt

In this lab, we will be using NMAP with the Gauntlt BDD testing framework to test the NodeGoat website. The key structure of the Gauntlt includes scenario, When, and Then. The scenario is used to describe the testing case. The When I launch a ...attack with... is used to define the tools and command options to execute the testing. Finally, the Then the output should is to define the expected results. It will make the whole script and the testing results. In this demonstration, we will have the following security testing scenarios:

• Scenario: Verify the security header using http-security-headers
• Scenario: Verify the server is vulnerable to a HTTP slow DOS attack
• Scenario: Verify the use of insecure SSL
• Scenario ...