August 2018
Intermediate to advanced
254 pages
6h 20m
English
OWASP ZAP is a multi-functional tool that can perform an array of tasks related to application security testing. It is capable of doing automated scanning as well and is extremely effective in manual testing and fuzzing. OWASP ZAP can be downloaded from https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project.
The following image shows the initial OWASP ZAP console. The left pane displays the site hierarchy, the right pane displays individual requests and responses, and the bottom pane displays active scans:

We can either first crawl the application or directly enter the URL to attack as shown in the following image. We can ...
Read now
Unlock full access