Automated Security Testing for JS Apps
summary
Claims that API-focused DAST finds the actually exploitable bugs in JS apps, not just front-end fluff, and demonstrates a toolchain that proves it: driving APIs directly via Postman collections and OpenAPI spec or GraphQL introspection, seeding realistic inputs with the faker Library, detecting broken access control and insecure direct object access (OWASP API Top 10), reproducing attacks with curl commands, and running scans locally or in CI/CD (can break builds).
AI-written summary · about
related talks
09mAutomated Application Security Testing
15mJumpstart Security & Penetration Testing APIs
55mAPI Security Assurance via E2E Testing
33mWhy Developers Struggle with API Security
09mGraphQL Security Testing Automation for Developers
10mJS Do It... Accurate Security Testing Automation for Developers
04mSecurity Testing for JS Apps, Node Congress
48mNavigating the depths of API security testing