Archives

TestNG Framework – A Practical Guide for Selenium Test Automation

TestNG in Selenium — My Honest Take After Years of Using It I’ll be straight with you. When I first heard ‘Just use JUnit, it’s simpler,’ I nodded and went along with it. Three months and a bloated test suite later, I was untangling execution order issues at 11pm on a Thursday. Not fun. TestNG […]

Desktop Web Testing vs Mobile App Testing — Two Platforms, Two Completely Different Challenges

What I’ve learned from working across both, and why treating them the same is a mistake I’ve watched this play out on more than a few projects. A team does thorough desktop testing, ships with confidence, and then the mobile users start complaining. The checkout doesn’t complete. The form won’t scroll. The button is there, […]

Selenium

Web browsers can be automated with Selenium, an open-source automation tool. It is mainly used for:  1. Testing of web applications.  2. Testing for regression.  3. Testing across browser. 4. Functional testing. 5. UI automation. Multiple programming languages, including Java, Python, C#, JavaScript, Ruby, and others, are supported.  Advantages of Selenium  1. Open Source (Free […]

Finding a Subdomain Takeover via CNAME Misconfiguration

Introduction During reconnaissance, I discovered a subdomain takeover vulnerability caused by a misconfigured DNS record pointing to an inactive third-party service. This misconfiguration allowed the possibility for an attacker to claim the resource and host malicious content under the organization’s domain. Subdomain takeover vulnerability occurs when a subdomain points to an unclaimed external service. Learn how it […]

File Upload Vulnerability

Introduction File upload functionality One of the most prevalent features in contemporary web apps is file upload functionality, which is also one of the riskiest when not used properly. I found a high-impact vulnerability during a recent security audit that started with a seemingly innocuous feature: uploading profile images. identifying dubious redirection in order to […]

Page Object Model Explained: What It Is, How It Works, and Why Your Tests Need It

I remember the first time a UI change broke 34 tests at once. The developer had renamed one input field — just the ID, nothing visible changed for users — and my entire login suite went red. Two hours of find-and-replace later, everything was green again. A week after that, a different field changed. Another […]