Robots with Pentest Recipes
summary
Shows a working pipeline that uses Robot Framework to glue OWASP ZAP, Nmap, Nessus, Burp and directory tools into reusable security “recipes,” producing HTML/JSON reports and Jenkins-friendly runs. Demonstrations use Selenium/PhantomJS to proxy authenticated sessions into scanners, convert bespoke authorization findings into regression scripts, and run parallelizable Nmap→ZAP→report pipelines. Code is open source on GitHub and the claim is that teams can run nmap scan and start zap active scan as CI-first, mostly automated pentests.
AI-written summary · about
chapters (11)
- 0:00Intro
- 2:14Overview
- 3:33Security in DevOps
- 6:13Security Challenges
- 8:08Automation Challenges
- 10:31Solutions
- 15:24Robot Framework
- 18:03Why we like it
- 20:01Demo
- 27:30Security Use Cases
- 32:00Selenium Script
related talks
01h 01mOpen Source Pentesting and Security Analysis Tools: the DevOps way… #slideless
58mOpen Source Pentesting and Security Analysis Tools: the DevOps way
36mLet's take baby steps to security testing
41mHow Scripting In ZAP Can Bridge The Gap Between Dev Teams And Security
35mAutomated Security Testing
45mSecurity Testing with OWASP ZAP in CI/CD
56mMatt Smith
49mKeynote: Pentesting ChatOps