Pathwise

Manuals / Security Testing Basics / Checkpoint 4

B · Practice · intermediate · Gate · Checkpoint 4 of 5

Checkpoint: security smoke

Run a mini security smoke on staging: authz, session, sensitive fields, headers notes.

Path progress
80%

Step 1 of 1

Ship the smoke report

One page: what you tried, what failed, what’s unknown.

Ship the smoke reportDrag stickies · tap for tips
Study mapDrag stickies · tap for tipsKeep it shortdrag · tap →Name the waitdrag · tap →Scope locatorsdrag · tap →Trace when stuckdrag · tap →One browser firstdrag · tap →Isolate statedrag · tap →Assert the UIdrag · tap →Retry wiselydrag · tap →Seed datadrag · tap →Close the loopdrag · tap →Keep it shortdrag · tap →Name the waitdrag · tap →Scope locatorsdrag · tap →Trace when stuckdrag · tap →One browser firstdrag · tap →Isolate statedrag · tap →Pathwise hackdrag · tap →Ship the smoke repdrag · tap →Try thisdrag · tap →Follow the dashed drag · tap →

Do this now

Write the report. Include “out of scope.”

Was this step clear?
Chapter learning outcomes
  • Smoke packaging
  • Severity language

Clear these before you leave

Side quest

Smoke pack

Complete checkpoint report on a practice app (e.g. OWASP Juice Shop).