Testing React Server Calls: Loading and Errors

When you make a server call from your React application, you want to let the user know what's going on. Is the application waiting for the server? Did the server return an error? In this workshop, we will discuss how to mock the server response and test the sequence of expected phases for the app depending on the server response.

Testing Web Applications Using Cypress

This workshop will teach you the basics of writing useful end-to-end tests using Cypress Test Runner.

We will cover writing tests, covering every application feature, structuring tests, intercepting network requests, and setting up the backend data.

Anyone who knows JavaScript programming language and has NPM installed would be able to follow along.

Introduction to JS Functional Testing at Scale

There are thousands of ways if not more to set up your automated testing environment. When it comes to stability and maintainability it is crucial to choose the right frameworks at the beginning of the journey. The ecosystem provides a variety of different tools that all rely on certain protocols and come with different levels of support for different use cases.

While there are the traditional WebDriver based JavaScript frameworks like Selenium or WebdriverIO, many new projects have popped up in recent years that provide even more capabilities, particularly for front-end developers.

In this workshop we will take a look at the JavaScript framework landscape for automated functional testing, such as Puppeteer, Playright, Cypress, and others. We will explore what their differences are and how to choose the right tool for your project. Then, we will look at various scenarios, from basic functional test concepts to complex visual and frontend performance tests and complete the session with scaling up our solution using a cloud vendor like Sauce Labs.

Key Takeaways

- Understand the principles of browser automation
- Learn to pick the right JavaScript framework for your project
- Master various of common automation scenarios including network stubbing, visual and automated performance testing using traditional frameworks such as WebdriverIO or newer tools like Puppeteer, Playwright or Cypress

Unleash the Power of Node.js Component (Integration) Tests

This workshop deals with component/integration tests which are the most powerful technique for testing modern backends. This type of tests focuses on realistic scenarios, user-oriented flows, production-like conditions. To achieve this high reliability it includes databases, message queues, the web framework, API, and all the other moving pieces that exist in our… production. This workshop takes it beyond the basics and covers also advanced topics like testing with message queues, optimizing a DB for testing, simulating failure by 3rd parties services, and more. By the end of the workshop, after practicing how to simplify the setup and increase the bugs coverage with more testing techniques - Your tests value will greatly increase. Warning: This might make you really looove tests.

Hacking Modern Web apps with RCE and Prototype Pollution

If you are the kind of person who enjoys webinars with practical information that you can immediately apply when you go back to work, this webinar is for you, all action, no fluff :)

"Hacking Modern Web apps: Master the Future of Attack Vectors" is a web security course that provides you with case studies from real-world vulnerable applications as well as know-how and techniques to take your websec kung-fu to the next level. In this brief 60-minute webinar we will explain what the course covers and give you a few lab samples covering the following topics:

• RCE options against Node.js applications
• Introduction to Prototype Pollution
• Prototype Pollution attacks in practice

Hacking Modern Desktop apps with XSS and RCE

If you are the kind of person who enjoys webinars with practical information that you can immediately apply when you go back to work, this webinar is for you, all action, no fluff :)

"Hacking Modern Desktop apps: Master the Future of Attack Vectors" is a desktop app security course that provides you with case studies from real-world vulnerable applications as well as know-how and techniques to take your desktop app security auditing kung-fu to the next level. The course covers attacks and mitigation against desktop apps on Linux, Windows and Mac OS X. The focus focuses on Electron but the techniques covered will be helpful against other desktop platforms, as well as CSP bypasses and other web security techniques. In this brief 60-minute webinar we will explain what the course covers and give you a few lab samples covering the following topics:

• Essential techniques to audit Electron applications
• What XSS means in a desktop application
• How to turn XSS into RCE in Modern apps
• Attacking preload scripts
• RCE via IPC

Uniform Browser Automation Infrastructure: Selenium, Pupppeteer and Playwright Tests on Laptop and in Remote Cluster

There are a lot of different types of tests and all of them are important. However, the only way to check that your product is working correctly is running it in the same environment as its user does. For web applications such environment is a browser. This is why reliable browser automation infrastructure nowadays is very important.

In this workshop, I will show you how to quickly deploy and use browser automation infrastructure with Moon solution. We will start by deploying everything on your workstation and will soon be able to run Selenium, Playwright and Puppeteer tests in parallel in the same cluster. Then I will demonstrate how to easily deliver the same experience for your team using a remote cluster in the cloud platform.