Practical Security Automation and Testing

How to do BDD security testing with Nmap and Gauntlt?

The following is a Gauntlt, BDD testing framework sample script to do Nmap security testing:

@slowFeature: nmap attacks for website. It will cover the following tesitng security header check, HTTP Slow DOS check, SSL cipher check, XSSed History Check, SQL Injection and the Stored XSS.   Background:    Given "nmap" is installed    And the following profile:      | name     | value                  |      | host     | nodegoat.kerokuapp.com |  Scenario: Verify the security header using the http-security-headers    When I launch a "nmap" attack with:      """      nmap -p80 --script http-security-headers <host>      """    Then the output should contain "X-Frame-Options: DENY"