Course Description

Overview

In this course, you will explore how WebInspect automates DAST. You will conduct dynamic scans on sample web applications using Command Line Interface (CLI), REST APIs, and Macros, along with other WebInspect tools. Additionally, you will learn to navigate scan results to analyze detected vulnerabilities and secure your applications.

The course emphasizes simple steps to utilize WebInspect in a lab environment, highlighting the ease of dynamic scanning. You will also leverage Fortify DAST WebInspect to run, view, and respond to security incidents. By utilizing Fortify technologies, you will address customer business problems based on defined scenarios.

Highlights:

• Run basic WebInspect scans
• Create macros, login, and workflow
• Run basic API scans and an API Postman collection
• Run scans through the command-line
• Utilize WebInspect security tools
• Create a custom WebInspect policy

Course Objectives

On completion of this course, participants should be able to:

• Use Fortify DAST WebInspect to run, view, and respond to security incidents leveraging Fortify technologies to solve customer business problems based on the defined scenarios.
• Successfully complete the lessons below in an environment that acts as a production environment.

Prerequisites

To be successful in this course, you should have the following prerequisites or knowledge:

• Familiarity with WebInspect for at least one month
• Basic programming skills
• Ability to read HTTP(S) requests and responses
• Basic understanding of web technologies, REST API, and command-line
• Proficiency in navigating Windows desktop, browser, and file system