In this chapter, we will demonstrate how to automate infrastructure security testing against the NodeGoat website. The infrastructure security testing will include known vulnerable JavaScript libraries, insecure SSL configurations, and the advanced NMAP NSE script testing technique for web security. At the end, we will also illustrate how to apply the BDD automation framework to SSLScan and NMAP.
The topics that will be covered in this chapter are as follows:
- Scan For known JavaScript vulnerabilities
- Scanning with OWASP dependency check
- Secure communication scan with SSLScan
- NMAP security scan with the BDD framework
