OAST vulnerabilities do not reflect back to WebInspect, making them difficult to detect with traditional DAST scanning. The Fortify OAST server provides DNS service for the detection of out-of-band attack vulnerabilities. You configure and use the server with a desktop version of WebInspect or with WebInspect on Docker.

This course teaches implementing and using the desktop version of WebInspect to discover the Log4Shell attack.

To provide you with the best Learner Experience, we are now offering DIRECT One-click (Quick Access) to our FREE Fortify Digital Learning offerings. One-click & you can access the material. All we ask is that you fill out the Anonymous Survey at the end of the offering so that we can continue offering you the best Learner Experience possible. Depending on the response (Surveys), this offering might only be available for a limited time?

Course (New): (FREE for All – Quick Access) Fortify WebInspect OAST: Management has decided to utilize WebInspect OAST. You are the security champion, that has been tasked with implementing this capability. You will get up to speed with the OAST technology, as well as run dynamic scans through WebInspect in a Lab environment that basically mirrors a Production environment. Audio is included. 

Enjoy