3 个仓库
Using a set of predefined test cases to validate the presence of security vulnerabilities.
Distinct from Inline Pattern Test Cases: Different from inline reproducers or parametrized tests; it is a methodology for validating vulnerabilities via test cases.
Explore 3 awesome GitHub repositories matching testing & quality assurance · Test-Case-Driven Vulnerability Validation. Refine with filters or upvote what's useful.
HowToHunt is a bug bounty hunting knowledge base and a structured guide for web application penetration testing. It provides a research methodology for organizing security testing procedures and validating application behaviors against known vulnerability patterns. The project features a curated library of security flaws and reconnaissance techniques. It organizes security testing into modular playbooks, checklists, and categorical vulnerability mappings to align specific exploitation techniques with target weaknesses. The repository covers a systematic sequence of information gathering task
Uses a test-case-driven process to confirm security flaws by matching application behavior against vulnerability patterns.
jwt_tool is a security testing toolkit designed for analyzing, tampering with, and auditing JSON Web Tokens to identify cryptographic vulnerabilities and implementation flaws. It serves as a comprehensive suite for security auditing and vulnerability scanning, providing a debugging interface to inspect token headers and payloads. The project distinguishes itself through specialized capabilities for token forgery and secret cracking. It includes a token generator that signs custom tokens using RSA, ECDSA, and symmetric algorithms, and a brute force tool that uses high-speed dictionary attacks
Executes a sequence of predefined test cases against target URLs to detect known token misconfigurations.
js-assessment 是一个 JavaScript 技术评估框架和代码质量评估器。它提供了一个测试驱动的环境,通过要求候选人实现解决一组失败测试用例的逻辑来评估编程技能。 该系统包括一个模拟 API 测试环境,通过网络请求加载本地 JSON 文件来模拟外部数据源。这允许在评估过程中验证代码如何处理 API 数据。 该框架通过自动化 Linting 脚本进行代码质量验证,并通过脚本驱动的验证过程进行技术技能评估。它将挑战组织成模块化练习,其中每个测试用例验证一段特定的逻辑。
Evaluates technical skill by requiring the implementation of logic to resolve a predefined set of failing test cases.