We will use BodgeIt (http://192.168.56.11/bodgeit/) to illustrate how ZAP's spider works. Refer to the following steps:
- In the Sites tab, open the folder corresponding to the test site (http://192.168.56.11 in this book).
- Right-click on GET:bodgeit.
- From the drop-down menu select Attack | Spider:
- In the Spider dialog, we can tell if the crawling will be recursive (spider inside the directories found), set the starting point, and other options. For now, we leave all default options as they are and click Start Scan:
- Results ...