Adaptive Testing Methodology: Crowdsourced Testing...
summary
Claim: a live service parses a site with curl to detect stack and returns a tailored checklist drawn from plain-text rules in crowdsourced GitHub; checks are labeled by time buckets 30 minute one hour one day unlimited and by tech (WordPress, Apache, etc.). Implementation runs Burp automation, WPScan, CMSmap, recon-ng and outputs JSON; a 30-minute run shows ~39 checks and a one-hour run jumps to ~104. Prototype exists, works in demos, but header-based detection is easy to fool.
AI-written summary · about
chapters (9)
- 0:00The integration problem
- 2:38Learning and methodology
- 5:35Issues with static guides
- 8:14Adaptive testing concept
- 13:42How the ATM service works
- 18:37Demo and scaling logic
- 22:28Crowdsourcing methodologies
- 26:25Future goals and Burp integration
- 31:25Q&A and community feedback
related talks
43mSecurity Testing Tools: Can I Touch You There?
09mAutomated Application Security Testing
58mOpen Source Pentesting and Security Analysis Tools: the DevOps way
01h 27mProactive Defense: Leveraging Hacker Tools for Early Vulnerability Detection
17mManual versus automated penetration testing on AWS
09mAutomated Application Security Testing
46mThe Bug Hunter's Methodology 2.0
39mAutomating myself out of a job...