June 2017
Intermediate to advanced
338 pages
8h 28m
English
Before we can get into the more advanced functions of ZAP, let's quickly get a baseline project up-and-running with a persistent project (which saves data between sessions). Assuming you have already configured your browser to point to ZAP as the proxy (mine is configured for localhost:8080), we'll target the Mutillidae application, which is similar to the DVWA but offers some greater depth, located at http://172.16.30.129/mutillidae/. I have also configured my client to trust certificates from ZAP by importing its Root certificate to ensure that I do not run into issues with SSL/TLS, although this is not likely in this test scenario.
There are a host of training and archived applications available on ...
Read now
Unlock full access