h4cker/web_application_testing

Web Application Testing References

Vulnerable Servers

There are a series of vulnerable web applications that you can use to practice your skills in a safe environment. You can get more information about them in the vulnerable_servers directory in this repository.

A Few Popular Tools

The following are a few popular tools that you learned in the video courses part of these series:

• Burp Suite
• OWASP Zed Attack Proxy (ZAP)
• sqlmap
• Paros Proxy
• httrack
• skipfish

How to Integrate OWASP ZAP with Jenkins

You can integrate ZAP with Jenkins and even automatically create Jira issues based on your findings. You can download the ZAP plug in here.

This video provides an overview of how to integrate

Popular Commercial Tools

• Qualys Web Scanning
• IBM Security AppScan

TONS of #AWESOME Web Security Resources

• https://github.com/qazbnm456/awesome-web-security

AMAZING RESOURCES ABOUT WEB TECHNOLOGIES, FRAMEWORKS, PLATFORMS (hundreds of resources)

Platforms

• Node.js - JavaScript runtime built on Chrome's V8 JavaScript engine.
• Frontend Development
• iOS - Mobile operating system for Apple phones and tablets.
• Android
• IoT & Hybrid Apps
• Electron - Cross-platform native desktop apps using JavaScript/HTML/CSS.
• Cordova - JavaScript API for hybrid apps.
• React Native
• Xamarin - Mobile app development IDE, testing, and distribution.
• Linux
  • Containers
• macOS
  • Command-Line
  • Screensavers
• watchOS - Operating system for the Apple Watch.
• JVM
• Salesforce
• Amazon Web Services
• Windows
• IPFS - P2P hypermedia protocol.
• Fuse - Mobile development tools.
• Heroku - Cloud platform as a service.
• Raspberry Pi - Credit card-sized computer aimed at teaching kids programming, but capable of a lot more.
• Qt - Cross-platform GUI app framework.
• WebExtensions - Cross-browser extension system.
• RubyMotion - Write cross-platform native apps for iOS, Android, macOS, tvOS, and watchOS in Ruby.
• Smart TV - Create apps for different TV platforms.
• GNOME - Simple and distraction-free desktop environment for Linux.

Programming Languages

• JavaScript
  • Promises
  • Standard Style - Style guide and linter.
  • Must Watch Talks
  • Tips
  • Network Layer
  • Micro npm Packages
  • Mad Science npm Packages - Impossible sounding projects that exist.
  • Maintenance Modules - For npm packages.
  • npm - Package manager.
  • AVA - Test runner.
  • ESLint - Linter.
  • Functional Programming
  • Observables
  • npm scripts - Task runner.
• Swift
  • Education
  • Playgrounds
• Python
  • Asyncio - Asynchronous I/O in Python 3.
  • Scientific Audio - Scientific research in audio/music.
• Rust
• Haskell
• PureScript
• Go
• Scala
• Ruby
  • Events
• Clojure
• ClojureScript
• Elixir
• Elm
• Erlang
• Julia
• Lua
• C
• C/C++
• R
• D
• Common Lisp
• Perl
• Groovy
• Dart
• Java
  • RxJava
• Kotlin
• OCaml
• ColdFusion
• Fortran
• .NET
  • Core
• PHP
  • Composer - Package manager.
• Delphi
• Assembler
• AutoHotkey
• AutoIt
• Crystal
• Frege - Haskell for the JVM.
• CMake - Build, test, and package software.
• ActionScript 3 - Object-oriented language targeting Adobe AIR.
• Eta - Functional programming language for the JVM.
• Idris - General purpose pure functional programming language with dependent types influenced by Haskell and ML.

Front-End Development

• ES6 Tools
• Web Performance Optimization
• Web Tools
• CSS
  • Critical-Path Tools
  • Scalability
  • Must-Watch Talks
  • Protips
• React - App framework.
  • Relay - Framework for building data-driven React apps.
• Web Components
• Polymer - JavaScript library to develop Web Components.
• Angular - App framework.
• Backbone - App framework.
• HTML5 - Markup language used for websites & web apps.
• SVG - XML-based vector image format.
• Canvas
• KnockoutJS
• Dojo Toolkit
• Inspiration
• Ember - App framework.
• Android UI
• iOS UI
• Meteor
• BEM
• Flexbox
• Web Typography
• Web Accessibility
• Material Design
• D3 - Library for producing dynamic, interactive data visualizations.
• Emails
• jQuery - Easy to use JavaScript library for DOM manipulation.
  • Tips
• Web Audio
• Offline-First
• Static Website Services
• A-Frame VR - Virtual reality for web browsers.
• Cycle.js - Functional and reactive JavaScript framework.
• Text Editing
• Motion UI Design
• Vue.js - App framework.
• Marionette.js - App framework.
• Aurelia - App framework.
• Charting
• Ionic Framework 2
• Chrome DevTools
• PostCSS - CSS tool.
• Draft.js - Rich text editor framework for React.
• Service Workers
• Progressive Web Apps
• choo - App framework.
• Redux - State container for JavaScript apps.
• webpack - Module bundler.
• Browserify - Module bundler.
• Sass - CSS preprocessor.
• Ant Design - Enterprise-class UI design language.
• Less - CSS preprocessor.
• WebGL - JavaScript API for rendering 3D graphics.
• Preact - App framework.
• Progressive Enhancement
• Next.js - Framework for server-rendered React apps.
• Hyperapp - Tiny JavaScript library for building web apps.

Back-End Development

• Django
• Flask
• Docker
• Vagrant
• Pyramid
• Play1 Framework
• CakePHP - PHP framework.
• Symfony
  • Education
• Laravel - PHP framework.
  • Education
• Rails - Web app framework for Ruby.
  • Gems - Packages.
• Phalcon
• Useful .htaccess Snippets
• nginx - Web server.
• Dropwizard
• Kubernetes
• Lumen
• Serverless Framework
• Apache Wicket - Java web app framework.
• Vert.x - Toolkit for building reactive apps on the JVM.
• Terraform - Tool for building, changing, and versioning infrastructure.

Databases

• Database
• MySQL
• SQLAlchemy
• InfluxDB
• Neo4j
• MongoDB - NoSQL database.
• RethinkDB
• TinkerPop - Graph computing framework.
• PostgreSQL - Object-relational database.
• CouchDB - Document-oriented NoSQL database.
• HBase - Distributed, scalable, big data store.

Content Management Systems

• Umbraco
• Refinery CMS - Ruby on Rails CMS.
• Wagtail - Django CMS focused on flexibility and user experience.
• Textpattern - Lightweight PHP-based CMS.
• Drupal - Extensible PHP-based CMS.
• Craft CMS - Content-first CMS.