Practical Security Automation and Testing

Step 2 – the Robot Framework script for the ZAP spider scan

In this Robot Framework script, we will trigger ZAP to do the spider scan for the website. The following steps will be performed:

1. ZAP spider scan for the target website
2. Get the ZAP scanning response; the response status code should be 200 success

There are two main approaches to using Robot Framework for ZAP web scanning. The first one is using the OWASP ZAP CLI, which allows us to send commands to control ZAP executions. The other way is using the ZAP REST API. Since we have demonstrated how to execute via the command line in the previous sqlmap example, we will demonstrate how to use the ZAP REST API with Robot Framework. To achieve this, Robot Framework will need to install ...