Dynamic security testing
Attacks a running instance: crawls endpoints and sends payloads to confirm injection, misconfiguration and exposure.
Sub-techniques
2
| ID | Name | Description |
|---|---|---|
V1027.001 | Baseline scan | Passive scan of a deployed preview for headers, cookies and known misconfigurations. |
V1027.002 | Template-based checks | Targeted requests that confirm a specific vulnerability class. |
Craft it
- Run a baseline scan against preview deployments.
- Write templates for findings from static analysis so they can be confirmed at runtime.
- Run active scans only against disposable environments.
Reverse engineer it
Signs that a codebase already runs this technique, and where to read how it is configured.
- zap-baseline or nuclei steps in deployment workflows.
- Custom nuclei templates in the repository.