Advanced70 min
Security Testing Lab
Run an OWASP-inspired checklist on a fictional portal (no real systems).
Scenario
Diriyah Digital Services training portal.
Requirements
- Only the fictional lab host
- No scanning of public websites
Tasks
- Session cookie flags
- IDOR-style other-user resource
- Basic XSS reflection check
Expected result
3 checklist findings with severity and repro (lab only).
Related videos
25:00Security Testing for QA — Part 9: Reporting & Logs
OWASP Foundation
25:30اختبار الأمان للمختبرين — Part 9: التقارير والسجلات
اختبار الأمان بالعربي
23:49Security Testing for QA — Part 8: Page Objects / Structure
OWASP Foundation
23:29اختبار الأمان للمختبرين — Part 8: تنظيم الكود والطبقات
اختبار الأمان بالعربي
Skills: security-testing · postman · manual-testing