YT YouTube2Text

YouTube2Text → Transcripts → Security Testing - Training Contents

Security Testing - Training Contents — Transcript

by QAFox · 5,495 words · 800 segments · language en · Watch on YouTube

Open in transcriber Summarize with AI Download SRT/VTT

Full transcript

0:00hello everyone welcome to the session
0:02one of security testing training Series
0:06in this session I am going to walk you
0:09through all the different security
0:10testing topics that I'm going to cover
0:13in this training series no matter what
0:17you are a beginner or you have no idea
0:20about this security testing you can
0:22blindly start here guys everything will
0:25be explained from scratch about the
0:28security testing in this
0:30training Series so let's get started
0:33with the first session where I'm going
0:35to show you all the different topics
0:38that I'm going to cover in this ring
0:41series of security testing course so
0:44let's get started so all these topics
0:46are written in this notes guys as you
0:48can see to organize them better so what
0:51I did is I used another tool okay to
0:54organize all these topics that I have
0:55listed in this notes of the secure
0:57testing Session One notes right all this
1:00topics to make it more understandable
1:02and more organized I mapped the same
1:05topics in this mind map tool as you can
1:08see here now the topics are more
1:10organized right rather than this notes
1:13as you can see all these topics I
1:15organized it here so that uh I can walk
1:17you through the different topics of
1:19security testing in a better and
1:20organized way so let's get started with
1:23this uh mind map guys so what is the
1:26first topic that I'm going to cover in
1:27this training series on the secure
1:29testing the first topic is going to be
1:30the introduction what exactly is
1:32security testing okay what exactly is
1:35security testing and what you perform as
1:37part of security testing all those stuff
1:38will be performed all those stuff will
1:40be explained as part of this
1:41introduction topic guys okay
1:43introduction then after introduction of
1:45the secur testing is done we'll be
1:47moving to importance so what will happen
1:51if you don't perform security testing
1:53what is exactly what exactly is the
1:55importance of security testing that
1:57thing is covered in the importance of
1:59secure testing then the next topic is
2:02what is the future of secureity testing
2:03if you learn secure testing what will be
2:05your future okay so that thing will be
2:10explained and also and also in the
2:13coming years in the coming years what is
2:16the role of the secure testing like how
2:18good is the secure testing like we
2:20discuss all the different topics right
2:22like what is what is the future of AI in
2:24future what is the future of uh iot what
2:27is the future of uh machine learning and
2:29lot lot of stuff right the similar way
2:31I'll explain what exactly is the future
2:33of the secure testing the coming days
2:35will the secure testing will grow or get
2:37down what exactly is that I'll explain
2:40that thing as part of secure test in
2:41future and uh the next topic will be so
2:44a lot of people are concerned like uh so
2:47whether I will get jobs if I learn
2:49secure testing or like uh I will get
2:52better jobs with better packages so what
2:55exactly will happen if you learn secure
2:57testing will you get better jobs and
2:58better packages that thing I'll explain
3:00as part of this fourth topic then moving
3:03forward guys here we'll start the EXA
3:05secur testing topics where we have to
3:08learn some basics of the secure testing
3:10before you learn any advanced topic of
3:12the secure testing guys you need to
3:13learn these basic concepts most of few
3:16of the topics you may already know guys
3:18okay so few topics like cookies and all
3:20those stuff right so those knowledge is
3:22very much required if you want to if you
3:25want to learn secure testing in a better
3:27way you have to start learning the
3:28basics first so the Basics are like
3:30these are the basics guys whatever I
3:31listed here are the basics CIA tried
3:34HTTP methods okay you generally do
3:37request and response kind of thing right
3:39so that kind of thing HTTP method the
3:41basics should be required what are the
3:42different HTTP methods HTTP Response
3:45Code HTTP headers what is a cookie what
3:48is a session what is the difference
3:50between cookie and session these are the
3:51basic general knowledge things that
3:53everyone should know regarding the web
3:55applications and all the stuff
3:57cryptography cryptography so what is
4:00cryptography uh as part of cryp
4:02cryptography we'll be learning
4:04encryption encoding hashing all the
4:05basic concepts of this uh these listed
4:08things will be covered guys once you
4:11understand all this basic you'll
4:12understand all the other things that
4:13will come after this basic concepts of
4:15the secure testing symmetric key
4:17algorithm what is that asymmetric key
4:19algorithm input validation output
4:21encoding don't worry about that don't do
4:23any R&D about this guys every topic will
4:25be covered in detail in the upcoming
4:26sessions of this training series okay
4:29just follow the contents for now this is
4:31only the content session guys okay this
4:32session is all about the different
4:34contents I'm going to cover as part of
4:36the secure testing training series input
4:39validation output encoding Black List
4:40validation what is Whit list validation
4:42client side validation server side all
4:44these are the basics guys that will be
4:45covered after we cover the after we go
4:47through the basics different basics of
4:49the secure testing then we'll go with
4:51some advanced concepts that we have to
4:52learn okay so still now secure testing
4:55has not been started guys we are just
4:57learning the concepts okay secure
4:59testing is more about the concepts guys
5:01uh sometimes uh like there are a lot of
5:03people guys who don't know any
5:04programming language like Java or cop or
5:06python they are not good at that okay uh
5:09they don't have that programming skill
5:11set or whatever it is so here is the
5:13thing if you are learning security
5:14testing it it is not compulsory that you
5:17should have some coding Modge okay even
5:19though you don't you are not able to
5:21write the logic or something it doesn't
5:22matter but guys at least some idea of
5:25the programming right uh will help you
5:28okay at a knowledge level will help you
5:29you don't have to write the code here
5:31but if you understand the code that will
5:32be enough if you just understand
5:34whatever the code that is written right
5:36that will be enough you don't have to
5:37write any code so that's why like you
5:40don't have to be a programming expert or
5:41something for learning secure testing
5:43secure testing is mostly about the
5:45concepts guys the lot of knowledge
5:47whatever the knowledge you have right it
5:48all about the knowledge how much
5:50knowledge you have about a cookie how
5:52much knowledge you have about the
5:53sessions so such kind of thing how much
5:55knowledge you have about the internal
5:57working of the web applications such
5:58kind of things is required for secure
6:01testing rather than programming mindset
6:03fine so and also even though programming
6:06knowledge is not that much required if
6:08you have the programming knowledge at
6:10some point of time it will be helpful
6:12for you in the secure testing guys but
6:14even though you don't require that level
6:15of programming knowledge secure testing
6:18has a lot of value in the market guys
6:20okay because the knowledge actually
6:22counts over programming right the
6:24knowledge that you have on the secure
6:25testing counts a lot so don't think that
6:27since programming is not there in the
6:29secure testing it doesn't matter it
6:31doesn't it's not that much valuable
6:32thing it's not like that guys secure
6:34testing is more valuable than you think
6:36so the amount of knowledge that is
6:39required is you have to learn like
6:40anything okay it's a separate stream you
6:42can say it's an end endless separate
6:44continuous learning stream you can say
6:46the more you learn the more uh more
6:49value you'll get or more Advantage you
6:51get out of learning the secureity
6:53testing fine anyhow let's move forward
6:56advanced concepts so after Basics are
6:58covered then we'll go to the advanced
7:00concepts where sdlc and threat modeling
7:03so how do you use security testing as
7:05part of sdlc process and in sdlc one of
7:08the phase of the sdlc we use we do thre
7:10modeling what is that thre modeling and
7:12how it is done in the sdlc such kind of
7:14thing we be explained and in different
7:16phases of sdlc what what type of a
7:18secure testing can be performed such
7:20also thing we be explained here then SSL
7:22handshaking process all the advanced
7:24topics guys I'm not going to go in
7:25detail about these topics now but I will
7:27just read out for you so SSL versus TSL
7:31T TLS s SSL or TLS version what is that
7:35how to find then security testing
7:37process and me methodology how do you
7:40implement the secure testing project in
7:41your projects and all those stuff okay
7:42these are the advanced concepts once
7:44Basics are done we'll go with the
7:46advanced concepts once you understand
7:47the basics and basic and advanced
7:49concepts then here is the thing guys uh
7:51we'll start uh working on the security
7:54testing secure testing is all about
7:55vulnerabilities different
7:56vulnerabilities identifying this
7:58different vulnerabilities in the
8:00application okay these are like uh you
8:03call if you are into a normal software
8:05testing right if you are into a normal
8:06software testing you investigate and
8:09find some bugs right you investigate the
8:11application with an intention of finding
8:12some defects or bugs here also in Secure
8:15testing Our intention will be to
8:17identify all these vulnerabilities
8:18vulnerabilities are like some kind of
8:20bugs which can be fixed to overcome the
8:22security problems in the application so
8:24these are the vulnerabilities I'll
8:25explain more about uh what exactly are
8:27these different vulnerabilities and how
8:29to how to find this vulnerabilities
8:31every topic needs a lot of attention
8:33guys lot of practice is required I'll
8:35give more examples okay I'll I'll show
8:37you how to practice them I'll give you I
8:40I'll solve lot of problems before you
8:42with more examples I'll take more
8:44examples uh so that your confidence on
8:46each and every identification of each
8:48and every vulnerability will get
8:50increased fine I'll do all this stuff
8:52guys even I'll try to give some
8:54assignments also where where and then
8:55required so these are all the different
8:57vulnerabilities guys that we need to
8:59practice as part of security testing so
9:01one is SQL injection there will be a lot
9:03of sessions guys each and every uh video
9:05session will be on each and every
9:06vulnerability in a detailed manner SQL
9:08injection cross-site scripting
9:10cross-site request forgery insecure
9:13direct object reference failure to
9:14restrict your url access security
9:17misconfiguration don't worry they look
9:19like Chinese words for you if you are
9:20new to the security testing but uh once
9:22we go to the real topics right I will
9:24explain in a detailed and easiest way as
9:26much as possible so that you you will
9:28not feel like that afterward okay after
9:30the sessions you will feel each and
9:31every topic will be so much easy for you
9:34for now just I will read out the
9:35contents like failure to restrict URL
9:37access security misconfiguration
9:39unvalidated redirect and forwards broken
9:41authentication and session management
9:43using components with known
9:45vulnerabilities sensitive data exposure
9:47XML external entity insecure logging and
9:49storage insecure communication
9:51vulnerable
9:53ssl/tls versions and any other things
9:56any other things again there are a lot
9:57of topics guys you see again it can
10:00expand here so first type of other
10:02topics are like authentication related
10:04test will
10:05perform so under authentication related
10:08test we'll get insecure communication
10:10user enumeration default or guessable
10:12user account Brute Force by bypassing
10:14authentication schema vulnerable
10:17password and password reset okay all
10:19these are the different things that we
10:20have to test as part of the secure
10:23testing coming to the authentication now
10:25the next one is authorization under
10:27authorization relation related test what
10:29what T we need to perform as part of
10:30security testing path travel Sals then
10:33bypassing authorization schema privilege
10:35escalation then coming to the next topic
10:38that is session management testing
10:39session hijacking session fixation
10:41session timeout session relay session
10:44invalidation exposed session variables
10:46lot of topics are there guys you see all
10:48these things we have to perform the real
10:50testing vulnerabilities are the things
10:52that we have to test as part of the
10:53secure testing Cas these are all the
10:55test cases for you you can say okay all
10:57the topics of the test cases uh this is
10:59done right so next one is configuration
11:01related test coming to configuration we
11:03have missing HTTP only secure Flags
11:06clickjacking HTTP strict Transport
11:09Security header browser catchy weakness
11:11catch weakness unsafe course policy HTML
11:13F cookie scope to parent domain improper
11:16error message all the different
11:18topics then we have malicious file
11:20upload and any other topics that I get
11:23randomly after completing this session
11:25I'll also cover that okay miscellaneous
11:26sessions also I'll cover here so these
11:28are all the test things that we have to
11:30learn once we learn these things in a
11:32better way with lot of practical
11:33examples and lot of Basics and with from
11:36scratch right you'll be able to perform
11:38secure testing without using any tools
11:41just with your uh just before sitting
11:43your machine by looking at the
11:44application you can perform guys okay
11:46that's what that's how uh like uh that's
11:49how level I will be explaining all these
11:51topics you don't have to even use the
11:53tools of secure testing tools okay you
11:54can actually perform manually if you're
11:56able to perform secure testing manually
11:58right that is more than performing with
12:00tools okay tools are required tools will
12:03make your job easy but as part coming to
12:06security testing right uh without using
12:08tools also we should be in a position to
12:10find the security vulnerabilities and
12:12security defects fine then you are at a
12:14good position after that uh you have to
12:16learn how to use tools and uh how to
12:19make your secure testing process uh more
12:21smooth and more easy and more less
12:23taking time kind of thing okay using
12:25tools so we'll also cover the tools I'll
12:27come to that later now the next thing is
12:29secure testing tools guys once you know
12:30how to identify all the secureity
12:32testing vulnerabilities and defects or
12:34whatever it is uh in with manual way
12:36without using any TS tools then your
12:38confidence will be rising like anything
12:40at that point of time your confidence on
12:42secure testing will be at a good level
12:43after that we'll go with the tools guys
12:45which will make your job more easy with
12:47help of tools also we can find the this
12:50vulnerabilities so uh there are lot of
12:52tools guys there are lot of tools in the
12:54market for performing this secure
12:55testing and there are different category
12:57of tools also for performing different
12:59types of secure testing but I will I we
13:01will'll discuss more about this during
13:03the sessions of the secure testing tools
13:05so there are different vulnerability
13:07scanners one category of secure testing
13:09tools that generally every secure tester
13:11will do is uses vulnerability scanners
13:14there are different vulnerability
13:16scanners one of the vulnerability
13:17scanner is this Buu tool guys which is
13:19famous in the market uh like 85 to 90%
13:22people use busit only when compared to
13:25other vulnerability scanner tools
13:26available in the market so we we'll have
13:28a detailed session on this bub suit
13:30which is a mostly used tool as part of
13:32secure testing and as part of the bub
13:34suit we'll scan the applications we'll
13:36do false POS false false positive
13:39elimination which is only possible if
13:41you have the manual knowledge of finding
13:43the one abilities okay this you see here
13:45your knowledge of manually finding the
13:47defects vulnerabilities in the
13:49application will will give you a handson
13:52on this false positive elimination
13:55whatever the tool suggests that may be
13:57correct or may not be correct so you
13:58should have our own mind to uh eliminate
14:01the things which are false okay a lot of
14:03things will be positive only good only
14:05correct results will be given by the
14:06tool but sometimes tool may give like 5%
14:09or 10% of false kind of reports that you
14:12have to check manually to validate
14:14whether whatever the tool is suggesting
14:16is correct or not then bypassing client
14:19side validations so this also I'll
14:22explain guys uh not at the UI level okay
14:25secur testing is not only performed at
14:27the UI level but also at the request and
14:29response level also so how to do that
14:32how to bypass that client side
14:33validation and then perform secure
14:35testing without UI that will be
14:36explained here with the help of B tool
14:39we can do that so fine and uh the next
14:42one is and any other tools okay uh there
14:44are lot of other tools I'll actually
14:46introduce you good number of tools uh
14:48which you can use as part of secure test
14:50fine so this is all about tools guys and
14:52also guys one more thing I have to tell
14:54you before going uh forward here is uh
14:56this training series is all about web
14:59application secure testing only not
15:01mobile security or not Network or not
15:03any iot okay if you are a beginner if
15:05you want to get started from somewhere
15:07on secure testing and you want to learn
15:09how to use perform the secure testing in
15:11your real live environment at your
15:13workplace then this is a say training
15:16series for you guys so and as part of
15:18this beginning Series right we'll be
15:20focusing more on the web application
15:22okay we I'll show you how to perform
15:23secure testing on the a web application
15:26and one more thing you have to keep in
15:28mind this is very important guys one
15:30more thing you have to keep in mind
15:31about secure testing after you after you
15:34learn all these topics from me about
15:36this vulnerabilities and all these tools
15:38and all those stuff right never use any
15:40of this uh skill set on some
15:43applications okay there are some
15:44applications that are already live in
15:46the market right lot of companies are
15:48there in the market and lot of
15:49applications are really in live so if
15:51you don't own that application don't
15:54perform secure testing without their
15:57permission okay some XY company is there
15:59that XYZ compan is running a website
16:02then as a secure tester in order to
16:04learn the skills what you did you went
16:05to that website and did some security
16:07testing there without knowledge without
16:09having knowledge that that is illegal
16:11okay it's very illegal guys and there
16:14are chances that you you will be you you
16:16may end up in jail you may end up in
16:18jail if you don't follow this so when
16:20you learn secure testing skills set if
16:22you have the secure testing skill set
16:23and if you without their permission of
16:25that XYZ company's website then if you
16:28directly perform secur testing on them
16:29you may end up in jail guys okay so
16:32you'll be treated as a hacker simple
16:34terms you'll be treated as a hacker guys
16:36okay so instead we should be ethical
16:39hacker by testing our own applications
16:42that the client has given the
16:43permissions for or we can set up some
16:45applications by own guys okay uh we can
16:48make uh we can we have a lot of Open
16:50Source applications uh that we can set
16:52up in our local uh Windows machine or
16:55Mac machine whatever it is and then we
16:58can um create the dummy applications or
17:01dummy live applications for our secure
17:03testing practice purpose but never
17:05perform secure testing on any
17:08application that you don't own okay
17:11without their permission if you perform
17:13that will be considered as hacking and
17:16you will you may end up in jail just be
17:18serious about this guys don't take it
17:20light it's very very important to
17:23understand before you start learning
17:24security testing this is very much
17:26important fine so next thing next thing
17:29is
17:30uh so uh I told you right uh this
17:33session is all about uh this training
17:34secure testing training series is all
17:36about web application Live project web
17:39application secure testing not mobile or
17:41not iot or not any other thing not
17:43Network okay so in this training series
17:46we'll learn by the end of this session
17:48by the end of this training series by
17:50the end of this training series we'll
17:51learn how to perform security testing on
17:54a real web application Live project so
17:57here we'll create a dummy real live web
18:00project web application project where we
18:02will try all our skill set there with an
18:05intention of finding vulnerabilities
18:07this is not a problem but if you perform
18:09One Security testing on some websites uh
18:11which you don't own or some some big
18:13company websites right you you may end
18:15up in jail okay so that's the thing you
18:17have to keep that in mind so for testing
18:19for uh for actually creating a kind of
18:22demo thing or for checking ourself in
18:24Secure testing right on some live
18:26project we have to set up that
18:27application guys in our local
18:29we'll set up for as part of setup we
18:31have to set up this zamp zamp kind of
18:33software and then we have to launch a
18:35website okay our own website some open
18:38source website code we will take and
18:39then launch it in our website in our
18:41local machine so this live application
18:44that we have set up in our machine that
18:45are that only we are going to
18:47test and there are some cases where
18:50there are some web applications in the
18:51market also guys which are open for
18:54secure testing which are open for secure
18:56testing if you really know that they are
18:58open for secure testing then only you
19:00have to perform guys you should not
19:01directly take it for granted and test
19:03okay so take care of that so we'll test
19:06the complete web application Live end to
19:08end all the functionalities of the
19:09application we are going to perform
19:10secure testing with an intention of
19:12finding the buck that is vulnerable
19:14security vulnerabilities I'll show
19:15practically how to test that uh uh live
19:18setup kind of web application that we
19:20have set up in our machine and how to
19:22find the vulnerabilities how to report
19:24them and all those stuff okay how to
19:25find the vulnerabilities and all those
19:27stuff I'll explain
19:29here then we we'll also create some test
19:32cases kind of documents guys again
19:34security testing test cases will be
19:35completely different from normal
19:37software testing guys so what type of
19:39test cases we have to create what kind
19:40of uh way we have to update the
19:43documents while performing the secure
19:45testing and any other requirement
19:46required documents guys for performing
19:48the secure testing I'll show you here
19:50okay as part of the upcoming sessions as
19:52part of this topic I'll be covering that
19:54so by the end of the sessions you'll
19:56have a handson also okay as part of this
19:58web application Live project you are
19:59going to have a good handson on the
20:01secure testing guys finally guys you
20:04have to learn about reporting how to
20:06report so whatever the secureity testing
20:08you performed how how to report that
20:11whatever the vulnerabilities you got how
20:13to represent them in a document as a
20:15report and send it to the client that
20:17thing I'll explain as part of the
20:18reporting so if I explain more about
20:20reporting guys uh reporting is all about
20:22risk rating okay so identifying the
20:25vulnerabilities here some vulnerability
20:27explained right so whether what that
20:28vulnerabilities list of vulnerabilities
20:29are available in the application or not
20:31identifying them then each and every
20:32vulnerability have such certain rating
20:34guys risk rating so how much risk it is
20:37it will cause for example there is some
20:39security issue in the login so people
20:41can easily login even though they don't
20:43have proper credentials they are loging
20:45that is risk rating may be high there
20:47right some other security issues may be
20:49there that may not cause that much risk
20:50to the application as part of hacking
20:52point of view so less risk May there so
20:55every vulnerability have some risk guys
20:58uh we'll get we'll understand some
21:00knowledge okay we'll I'll explain you
21:02like which vity has which risk and how
21:04to identify that and all those stuff and
21:06how to use that risk rating in your
21:08report while creating the report how to
21:09use that risk rating I'll explain during
21:11this process and finally the final
21:13report that we so this end result right
21:16whatever the testing we have done
21:17security testing we have done that uh
21:20like where you represent that to the
21:22client how do you communicate that
21:23testing to the client with the help of
21:25report only that report preparation with
21:28the help of R creating of different
21:29vulnerabilities you have identify in the
21:31application that will be covered in
21:33detail in the reporting section guys
21:35okay so so by this time you'll have lot
21:38of confidence guys but uh so few more
21:40things let me uh explain before
21:42concluding this session that is this
21:45session each and every concept will be
21:47explained with more practical examples
21:49guys I am going to take a lot of
21:50examples and
21:52also different websites which are open
21:55for secure testing I'm going to list
21:57down and uh share it with you guys as
21:59part of the sessions where in one of the
22:01sessions I'll share you the different
22:03websites that on which you can perform
22:05secure testing and or you can practice
22:07secure testing you should not be perform
22:09secure testing on random randomly on
22:11some applications that are available in
22:13the market already that will that that
22:16may end up you end you up in jail also
22:18okay that much serious it is so you may
22:21be considered as a hacker and you may
22:22end up in ja for testing secure testing
22:24such kind of applications without
22:26permissions of their owner fine so so
22:29that's the reason guys I I'll will share
22:30you some website different websites
22:32where we can practice secure testing and
22:35also I'll give more examples guys okay
22:36I'll solve lot of examples for you and
22:39also I'll give some assignments here and
22:41there which you can done and get
22:43Confidence from that okay so practical
22:46demonstration with Solutions will be
22:48given for you for each and every
22:50vulnerability I I will be showing you
22:52before this before you actually like uh
22:54take one unlearnable take one example
22:57low low level example high level example
22:59I I'll solve everything for you and also
23:02assignments as I mentioned okay this is
23:04something then after you have this web
23:08application security testing done what's
23:09your future guys okay do you have to
23:11stop learning about security no right we
23:14have to continue guys okay secure
23:15testing is a never endless Journey it's
23:17a continuous Learning Journey guys so
23:19don't stop with the web application
23:20secure testing there are lot of secure
23:22testing security testings in the market
23:24like mobile security testing network
23:26security testing Cloud security testing
23:27API security t database security iot
23:30security and many others are there in
23:31the market so each and everything will
23:34take consider considerable amount of
23:36time but in order to learn all these
23:37things okay in order to get to this
23:39mobile security level or any other
23:41security level guys first you need to
23:42master the concepts of security testing
23:45this Concepts that I'm explaining here
23:47the knowledge about the vulnerabilities
23:49the different tools you have to learn
23:51okay a confidence level about testing
23:52already the web application then only
23:55you can go to this learning of this
23:57mobile okay these are are the next steps
23:59guys for you okay these are the next
24:00steps that you have to plan as part of
24:02learning the secure testing so it is a
24:04very big stream guys okay you can get
24:05started here in this training series
24:08then once you have done this uh parall
24:10you can also apart from after this uh
24:12training series when you go and start
24:15learning the next testing type secure
24:17testing types like mobile and all along
24:19with that you can also do some
24:20certification guys so unlike other
24:23software other software testing types
24:25secure testing is giving good valuation
24:29for the certifications okay so if you
24:31are into secure testing and if you do
24:32some certification guys uh your profile
24:34will get valued like anything so there
24:37are some certifications at a beginner
24:39level when you are at a two or three
24:40years experience in security and what
24:42type of certifications you have to do
24:44and when you have crossed five years of
24:46experience in Secure testing what type
24:47of certifications you have to do all
24:49those stuff okay I'll cover all the list
24:51of certifications that we can done and
24:53what are the certifications and all
24:55those stuff I'll cover in as part of the
24:56certification session so that you can
24:59plan after learning the secure testing
25:00from this training series fine so next
25:04thing next important thing is apart from
25:06future planning and certifications the
25:08main thing that we are learning secure
25:09testing is how to implement this this
25:12particular secure testing concept at our
25:13workplace let's say you are working some
25:15at some company XYZ company where secure
25:18testing is not being done by any there
25:19is no team actually performing secure
25:21testing you are the first person who are
25:23who want to introduce secure testing in
25:24your company okay so how to introduce
25:27that what are the the tactics how to go
25:29to your manager and talk about the
25:31secure testing and how to convince him
25:33so that uh even he he will uh add the
25:37secure testing practices into his normal
25:39software testing practices that are
25:41there in the company okay apart from
25:43doing the normal okay Automation and all
25:45those stuff if you want to also
25:46introduce security uh a lot of companies
25:49have already all this type of testings
25:51like uh manual automation performance
25:54and all guys but coming to security uh
25:57all not all companies will have the
25:58security testing practices in place
26:00right so if you are the first person who
26:02want to introduce the security testing
26:04at your workplace then how to do that
26:05how to talk to your manager and how to
26:07get that done okay and uh uh that is the
26:11one thing and other thing is like U yeah
26:14you convinced your manager that's fine
26:15you already convinced your manager about
26:17uh adding the secure testing practices
26:20in your normal testing services thing at
26:22your company but now you want to you
26:25want to uh once you are convinced uh and
26:28you have convinced your higher seniors
26:30or whatever it is then once it is
26:32approved then you need to create a plan
26:34guys right so the next step is to get
26:36the clients how to get the clients how
26:39to what type of marketing documents you
26:41need to create for uh convincing the
26:44clients the next step is about the
26:45clients guys so the proposal documents
26:47or marketing documents or whatever the
26:49documents that are required for sharing
26:51with the client and uh uh giving
26:54confidence to the client that your
26:55company can do the secure testing okay
26:59that part also I will explain guys this
27:00is very much important okay so not other
27:03testing doesn't require this kind of
27:05thing but secure testing may be new for
27:07lot of companies so if you are a person
27:09in that company and if you want to
27:11introduce the secur testing and also get
27:12the projects for the company then this
27:14section will be more helpful for you so
27:17finally guys um finally guys once you
27:20get all this knowledge and once you are
27:22at good place then we'll go with the
27:24interview questions list of interview
27:26questions that you how to answer the
27:27interview questions and uh and also I'll
27:29will share you a lot of resources guys
27:30from where you can enhance your secure
27:32testing skills okay so this is how good
27:35guys the secure testing uh training
27:36series is going to be so hope guys uh
27:39you understood what I'm going to cover
27:41as part of this uh secure testing
27:43training series see you in the next
27:45sessions guys thank you bye

About this transcript

This page contains the full transcript of Security Testing - Training Contents by QAFox, generated from the public captions YouTube serves with the video. The transcript has 5,495 words across 800 segments, with the original timestamps preserved so you can click any line to jump to that moment in the embedded player.

What you can do with it

Use the transcript to take notes, quote the speaker, build a study guide, generate a summary with ChatGPT or Claude via the YouTube Summary tool, or export it as a timed subtitle file with YouTube to SRT. You can also re-open it in the transcriber to translate the transcript into 100+ languages.

Free YouTube transcript tool

YouTube2Text is a free YouTube transcript generator — no signup, no daily limit. Paste any YouTube link and get the full transcript instantly, with timestamps, click-to-jump, translation to 100+ languages, AI prompts for ChatGPT, Claude, and Gemini, and exports to TXT, SRT, VTT, or Markdown.