October 2018
Intermediate to advanced
528 pages
12h 33m
English
OWASP Zed Attack Proxy (ZAP) is a web application vulnerability scanner. Created by the OWASP project, this is a Java-based open source scanner that has a great deal of functionality. It includes web crawlers, vulnerability identification, and fuzzing analysis, and can serve as a web proxy. To launch ZAP, go to Applications | Web Application Analysis | owasp-zap, or in the Terminal enter:
# owasp-zap

Once loaded, it's easy to get started with scanning the target site. On the main screen in ZAP, there is a field to enter the address of the target. This time, the target is one of the vulnerable web apps on the BWA virtual machine, ...
Read now
Unlock full access