May 30Mobile App Security Testing — Static Analysis OverviewThe mobile industry is booming like never before. This has created a number of types of mobile devices, mobile OS. The mobile boom is not without its risks. Developer generally creates application from a “functionality first” perspective, but with security as a low priority. This is an unfortunate reality. In…Security Testing3 min read
May 24Why you should execute your performance tests gradually?Let’s assume that we have a planned performance testing run with 10,000 users. In this article I will discuss with you why we should start our execution gradually , from my point of view you should not start the run with the mentioned number of users , 10,000 users couldn’t…Performance Testing2 min read
May 5OWASP ZAP add-ons that will enrich your discoveryIn this article i will refer to number of add-ons that i think may help enrich the vulnerability discovery and also give a clear understanding about the system under test. First of all what is OWASP ZAP? Zap is a famous open source automated pen testing tool , created and…Owaspzap3 min read
Feb 13API Security Testing With Postman and OWASP ZapMost of the content around API testing is about functional testing or recently about API automation testing , so what about Security Testing? We’re going to use Postman and consume our existing collections. The idea here is to send the Postman requests to OWASP Zap to be able to start…Api Testing3 min read
Oct 31, 2021Forecasting Number of users in performance testingHow many users should be applied in our performance tests ? in a previous article we discussed some ways that may simplify the process of setting system SLA , so if we can say that we have now our SLA or simply what is the response time we are hoping…Performance Testing2 min read
Aug 26, 2021Running performance tests from the cloud , why?Does it necessary , why , for what cost and limitations ,all these questions are valid and make totally sense. Let me first define what is meant by running performance tests from the cloud , in the simple form it is running performance test scripts from a rented virtual machine(s)…Performance Testing2 min read
May 30, 2021Performance Tuning — A Team EffortDays ago, I was discussing the idea of performance tuning with a number of fellow testers and the discussion direction was heading mainly towards the responsibilities than the methodology. The main question was who is responsible for the performance tuning? I think we have to define what is performance tuning…Performance Testing2 min read
Nov 2, 2020How to Set your performance testing acceptance criteriaThis is always a question for people who are doing performance testing (as a general term) for the first time and also those who don’t have a specific performance requirements. What numbers to compare to? what are the current response time means? is it good or bad? How to set…Performance Testing2 min read
Jun 11, 2020How to add security checks to your manual / automation test suiteLet me tell you that you can have a basic / moderate security checks in your manual test suite by extending your test cases in two different areas : Most of test suites if not all of them are already testing the sections mentioned above but mostly just a basic…Security Testing3 min read
Jun 5, 2020Performance Test Script Validation — Why & How?The main goal for any performance test script simply is to work , but is this enough? I mean is it enough that your script has no errors ? No errors do not mean that your script is working flawlessly , you may get a 200 response code but the…Performance Testing4 min read
