# Dast

> DAST (Dynamic Application Security Testing)

- Skill: `neuralblitz/dast` (Agent Skill)
- Install (CLI): `npx skillmds@latest add neuralblitz/dast`
- Raw SKILL.md: https://api.skillmd.com/api/skills/neuralblitz/dast/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: NeuralBlitz (https://skillmd.com/u/neuralblitz)
- Updated: 2026-09-22
- Page: https://skillmd.com/skills/neuralblitz/dast

---

# DAST (Dynamic Application Security Testing)

DAST is a black-box security testing methodology that analyzes running applications from the outside to identify security vulnerabilities without access to source code.

## Key Concepts

- Black-box testing
- Request/response analysis
- Fuzzing techniques
- Vulnerability templates
- Authentication handling

## Common Use Cases

- Production security scans
- Staging environment testing
- API security testing
- Compliance validation
- Penetration testing aid

## Best Practices

- Scan in staging before production
- Authenticate properly for full coverage
- Use authenticated scanning
- Limit rate to avoid disruption
- Track and prioritize findings

## Resources

- OWASP ZAP: owasp.org/www-project-zap
- Burp Suite: portswigger.net/burp
- Related Skills: sast, penetration-testing, api-security