February 2019
Intermediate to advanced
256 pages
7h 34m
English
To do a ZAP-CLI quick scan with specified XSS and SQL injection security policies, the following command can be used. The ZAP-CLI may require the API Key of ZAP. To access or disable the API Key, configure the Disable the API Key checkbox under the OWASP UI menu, Tools | Options... | API:
$ zap-cli quick-scan -s xss,sqli --spider -r http://nodegoat.herokuapp.com/
It will take a while for ZAP to finish the spider and active scan.
Read now
Unlock full access