Awesome Reviewers

Verification · Testing

Dynamic security testing

Attacks a running instance: crawls endpoints and sends payloads to confirm injection, misconfiguration and exposure.

Sub-techniques

  • Baseline scan V1027.001

    Passive scan of a deployed preview for headers, cookies and known misconfigurations.

  • Template-based checks V1027.002

    Targeted requests that confirm a specific vulnerability class.

How to build it

  1. Run a baseline scan against preview deployments.
  2. Write templates for findings from static analysis so they can be confirmed at runtime.
  3. Run active scans only against disposable environments.

Signals in a repository

  • zap-baseline or nuclei steps in deployment workflows.
  • Custom nuclei templates in the repository.